Role Overview:We are seeking a highly skilled Senior PKI & Venafi Engineer to support and enhance the organization's Certificate Lifecycle Management (CLM) and Public Key Infrastructure (PKI) capabilities. This role is responsible for application onboarding, certificate lifecycle automation, PKI operations, certificate governance, platform resiliency, and technical consultation across hybrid and cloud environments. The successful candidate will serve as a subject matter expert for enterprise certificates, PKI architecture, Venafi Trust Protection Platform, certificate automation patterns, and operational support, collaborating with various teams and vendors to ensure secure certificate deployment, monitoring, renewal, and governance.
Key Responsibilities:- Administer and support enterprise Certificate Lifecycle Management (CLM) services, managing the complete certificate lifecycle from discovery to retirement, ensuring compliance with enterprise standards and industry requirements.
- Administer and maintain the Venafi platform and supporting infrastructure, configuring policies, workflows, Certificate Authorities, integrations, discovery jobs, notifications, reporting, and access controls.
- Lead application onboarding activities into the Certificate Lifecycle Management platform, assessing requirements, defining approaches, and designing automation patterns for diverse platforms including Windows, Linux, Azure, Kubernetes, WebLogic, IIS, F5, Kafka, Solace, Ping, and cloud-native environments.
- Design, implement, and support certificate lifecycle automation solutions using Venafi Native Drivers, APIs, vCert Utilities, CI/CD Pipelines, GitHub Actions, Azure DevOps, PowerShell, Python, and Ansible.
- Support internal PKI infrastructure and certificate authority services, participating in CA operations, CRL publication, backup/recovery testing, disaster recovery exercises, and platform resiliency improvements.
- Support certificate governance and compliance initiatives, maintaining ownership, metadata, and accountability records, and ensuring adherence to security standards for TLS/SSL, certificate issuance, cryptographic key management, and Certificate Authority controls.
Required Skills:- Expertise as a Senior PKI & Venafi Engineer.
- Subject matter expertise in enterprise certificates, PKI architecture, and Venafi Trust Protection Platform.
- Proficiency in certificate automation patterns and operational support.
- Experience with Microsoft Azure.
- Strong understanding of Public Key Infrastructure.
Qualifications:- 10+ years of experience in PKI and Certificate Lifecycle Management.
