Senior PKI & Venafi Engineer

Role Descriptions

• Certificate Lifecycle Management
• Administer and support enterprise Certificate Lifecycle Management (CLM) services.
• Manage the complete certificate lifecycle including: o, Discoveryo, Requesto, Issuanceo, Renewalo, Revocationo, Deploymento, Monitoringo, Retirement
• Ensure certificates remain compliant with enterprise standards and industry requirements.
• Support certificate inventory management and visibility initiatives.
• Assist with remediation of expiring, unmanaged, self-signed, and non-compliant certificates, Venafi Platform Administration
• Administer and maintain the Venafi platform and supporting infrastructure., Configure and manage: o, Policieso, Workflowso, Certificate Authoritieso, Integrationso, Discovery jobso, Notificationso, Reportingo, Access controls, Support platform upgrades, maintenance activities, and technology refresh initiatives.
• Collaborate with Venafi support and vendors to resolve technical issues and implement enhancements.
• Application Onboarding & Solution Engineering
• Lead application onboarding activities into the Certificate Lifecycle Management platform.
• Assess application certificate requirements and define onboarding approaches.
• Design and implement automation patterns suitable for application needs.
• Partner with application teams to understand deployment architectures, certificate formats, trust requirements, and operational processes., Support onboarding across: o, Windowso, Linuxo, Azureo, Kuberneteso, Web, LogicoIISoF5o, Kafkao, Solaceo, Pingo, Cloud-native platforms
• Provide technical consultation and solution recommendations to application teams. Certificate Automation, Design, implement, and support certificate lifecycle automation solutions.
• Develop automation patterns using: o, Venafi Native Driverso, Venafi APIsov, Cert UtilitiesoCI/CD PipelinesoGitHub Actionso, Azure DevOpso, Power, Shello, Pythono, Ansible, Automate certificate renewal, provisioning, deployment validation, and application restart activities.
• Drive reduction of manual certificate deployment processes and operational risk.
• Create reusable automation patterns and onboarding frameworks for adoption across the enterprise.PKI Operations & Resiliency
• Support internal PKI infrastructure and certificate authority services., Participate in: o
• Certificate Authority operationsoCRL publication activitieso, Backup and recovery testingo, Disaster Recovery exerciseso, Platform resiliency improvements
• Monitor certificate ecosystem health and availability.
• Support root and intermediate certificate management activities.
• Participate in major incident response and troubleshooting efforts, Security & Governance
• Support certificate governance and compliance initiatives., Maintain certificate ownership, metadata, and accountability records.
• Ensure adherence to security standards for: oTLS/SSLo, Certificate issuanceo, Cryptographic key managemento, Certificate Authority controls

Essential Skills

• We are seeking a highly skilled Senior PKI & Venafi Engineer to support and enhance the organizations Certificate Lifecycle Management (CLM) and Public Key Infrastructure (PKI) capabilities.
• This role will be responsible for application onboarding, certificate lifecycle automation, PKI operations, certificate governance, platform resiliency, and technical consultation across hybrid and cloud environments.
• The successful candidate will serve as a subject matter expert for enterprise certificates, PKI architecture, Venafi Trust Protection Platform, certificate automation patterns, and operational support.
• The engineer will work closely with application teams, infrastructure teams, cloud teams, security architects, and vendors to ensure certificates are deployed, monitored, renewed, and governed securely throughout their lifecycle.
• Responsibilities align closely to automation, onboarding, renewal, discovery, governance, and resiliency objectives documented within the CLM program.

Skills: Microsoft Azure, Public Key Infrastructure

Experience Required: 10 & Above