Role Overview:We are seeking an experienced PKI Venafi Architect to lead the design, implementation, governance, and automation of enterprise Public Key Infrastructure (PKI) and Certificate Lifecycle Management (CLM) solutions. This role provides architecture leadership for machine identity management, certificate automation, cryptographic controls, and trust frameworks across hybrid, cloud, and on-premises environments. The ideal candidate will work closely with Security, Infrastructure, Cloud, DevOps, Identity & Access Management, and Application teams to build scalable and secure trust services.
Key Responsibilities:- Design and maintain enterprise PKI architecture, including Root CA, Issuing CA, CRL, OCSP, and HSM.
- Lead the implementation, governance, and automation of enterprise Public Key Infrastructure (PKI) and Certificate Lifecycle Management (CLM) solutions.
- Provide architecture leadership for machine identity management, certificate automation, cryptographic controls, and trust frameworks.
- Develop certificate governance standards, policies, and Venafi platform engineering across hybrid, cloud, and cryptographic control frameworks.
- Architect highly available and resilient PKI and CLM platforms.
- Drive enterprise machine identity and certificate management strategy.
- Design and administer Venafi Trust Protection Platform (TPP).
- Define onboarding standards, workflows, policies, reporting, discovery jobs, and access models.
- Architect integrations between Venafi and enterprise applications.
Required Skills:- Experienced (10+ years) in PKI and Security Architecture.
- Expertise in Venafi Trust Protection Platform (TPP) design and administration.
- Strong understanding of PKI components: Root CA, Issuing CA, CRL, OCSP, HSM.
- Proficiency in machine identity management, certificate automation, and cryptographic controls.
- Ability to develop certificate governance standards and policies.
- Experience with hybrid, cloud, and on-premises environments.
- Familiarity with integrations between Venafi and enterprise applications.
Qualifications:- 10+ years of experience in PKI and Venafi architecture.
