Security Engineer with PKI & Venafi

Job Title: : Security Engineer with PKI & Venafi Location: Chicago IL Duration: 12+ Months

Role Description:

• Design and maintain enterprise PKI architecture| including Root CA| Issuing CA| CRL| OCSP| HSM| and trust frameworks.
• Develop certificate governance standards| policies| and cryptographic control frameworks.
• Architect highly available and resilient PKI and CLM platforms.
• Drive enterprise machine identity and certificate management strategy.
• Venafi Platform Architecture
• Design and administer Venafi Trust Protection Platform (TPP).Define onboarding standards| workflows| policies| reporting| discovery jobs| and access models.
• Architect integrations between Venafi and enterprise applications| cloud services| and security platforms.
• Lead Venafi platform upgrades| enhancements| and optimization initiatives. Certificate Lifecycle Automation Architect automated certificate provisioning and renewal solutions.
• Design automation frameworks using:
• Venafi APIs
• vCerto
• PowerShell
• Python
• Ansible
• GitHub
• Actions
• Azure DevOps
• CI/CD pipelines
• Drive adoption of certificate automation across enterprise application portfolios.
  

Essential Skills:

• We are seeking an experienced (10+ years) PKI Venafi Architect to lead the design| implementation| governance| and automation of enterprise Public Key Infrastructure (PKI) and Certificate Lifecycle Management (CLM) solutions.
• The ideal candidate will provide architecture leadership for machine identity management| certificate automation| cryptographic controls| and Venafi platform engineering across hybrid| cloud| and on-premises environments.
• This role will work closely with Security| Infrastructure| Cloud| DevOps| Identity & Access Management| and Application teams to build scalable and secure trust services.

Education: At least a bachelor s degree (or equivalent experience) in Computer Science, Software/Electronics Engineering, Information Systems, or a closely related field is required for the project