Why This Role Stands Out
This hybrid PKI Engineer role offers significant growth potential by allowing you to master Venafi platform administration and drive critical certificate automation initiatives for a reputable company. You'll thrive if you are a mid-senior level engineer eager to enhance security and streamline operations through innovative solutions, so consider applying to this exciting opportunity.
Quick Overview
Job Description
Job Title: Certificate Lifecycle PKI Engineer with Venafi Expertise
Role Descriptions: Certificate Lifecycle ManagementAdminister and support enterprise Certificate Lifecycle Management (CLM) services.Manage the complete certificate lifecycle including: oDiscoveryoRequestoIssuanceoRenewaloRevocationoDeploymentoMonitoringoRetirementEnsure certificates remain compliant with enterprise standards and industry requirements.Support certificate inventory management and visibility initiatives.Assist with remediation of expiring unmanaged self-signed and non-compliant certificatesVenafi Platform AdministrationAdminister and maintain the Venafi platform and supporting infrastructure.Configure and manage: oPoliciesoWorkflowsoCertificate AuthoritiesoIntegrationsoDiscovery jobsoNotificationsoReportingoAccess controlsSupport platform upgrades maintenance activities and technology refresh initiatives.Collaborate with Venafi support and vendors to resolve technical issues and implement enhancements.Application Onboarding & Solution EngineeringLead application onboarding activities into the Certificate Lifecycle Management platform.Assess application certificate requirements and define onboarding approaches.Design and implement automation patterns suitable for application needs.Partner with application teams to understand deployment architectures certificate formats trust requirements and operational processes.Support onboarding across: oWindowsoLinuxoAzureoKubernetesoWebLogicoIISoF5oKafkaoSolaceoPingoCloud-native platformsProvide technical consultation and solution recommendations to application teams. Certificate AutomationDesign implement and support certificate lifecycle automation solutions.Develop automation patterns using: oVenafi Native DriversoVenafi APIsovCert UtilitiesoCICD PipelinesoGitHub ActionsoAzure DevOpsoPowerShelloPythonoAnsibleAutomate certificate renewal provisioning deployment validation and application restart activities.Drive reduction of manual certificate deployment processes and operational risk.Create reusable automation patterns and onboarding frameworks for adoption across the enterprise.PKI Operations & ResiliencySupport internal PKI infrastructure and certificate authority services.Participate in: oCertificate Authority operationsoCRL publication activitiesoBackup and recovery testingoDisaster Recovery exercisesoPlatform resiliency improvementsMonitor certificate ecosystem health and availability.Support root and intermediate certificate management activities.Participate in major incident response and troubleshooting effortsSecurity & GovernanceSupport certificate governance and compliance initiatives.Maintain certificate ownership metadata and accountability records.Ensure adherence to security standards for: oTLSSSLoCertificate issuanceoCryptographic key managementoCertificate Authority controls
Essential Skills: Job DescriptionWe are seeking a highly skilled Senior PKI & Venafi Engineer to support and enhance the organizations Certificate Lifecycle Management (CLM) and Public Key Infrastructure (PKI) capabilities. This role will be responsible for application onboarding certificate lifecycle automation PKI operations certificate governance platform resiliency and technical consultation across hybrid and cloud environments.The successful candidate will serve as a subject matter expert for enterprise certificates PKI architecture Venafi Trust Protection Platform certificate automation patterns and operational support. The engineer will work closely with application teams infrastructure teams cloud teams security architects and vendors to ensure certificates are deployed monitored renewed and governed securely throughout their lifecycle. Responsibilities align closely to automation onboarding renewal discovery governance and resiliency objectives documented within the CLM program.
Skills: Digital : Microsoft AzurePublic Key Infrastructure
Experience Required: 10 & Above
Similar jobs
- AP
Mechanical Engineer- Waltham
NewAuto ApplyAcorn Product Development, Inc.
Waltham, Massachusetts🇺🇸On-siteYesterdayRoboticsCFDFEA+2Engineering - AP
Senior Mechanical Engineer- Waltham
NewAuto ApplyAcorn Product Development, Inc.
Waltham, Massachusetts🇺🇸On-siteYesterdayRoboticsCFDFEA+3Engineering - LP
MEP Engineer (Connectivity)
NewAuto ApplyLegacy Professional Services
Lebanon, Indiana🇺🇸On-siteYesterdayFiberBIMConstruction Management+3Engineering - LP
Project Engineer - Mechanical QC
NewAuto ApplyLegacy Professional Services
Lebanon, Indiana🇺🇸On-siteYesterdayBIMComplianceConstruction Management+3Engineering - IT
Piping Engineer, PE
NewAuto ApplyITAC
Raleigh, North Carolina🇺🇸On-siteYesterdayAutoCADSchedulingEngineering - VP

Mechanical Design Engineer
NewAuto ApplyVision Point Systems, Inc.
West Bethesda, Maryland🇺🇸Hybrid12 hours agoCADMechanical DesignSolidWorksEngineering - LI
Chief Engineer
NewAuto ApplyLefferts Investments
Miami Beach, Florida🇺🇸On-site12 hours agoComplianceFLSAHVAC+4Engineering - DM
Quality Engineer
NewAuto ApplyDavis Machine
Euless, Texas🇺🇸On-site12 hours agoMicrosoft OfficeProcess ImprovementEngineering - PP
Lead Mechanical Substation Engineer
NewAuto ApplyParadigm Power Delivery Inc.
Overland Park, Kansas🇺🇸On-site14 hours agoComplianceGISTechnical SupportEngineering - PP
Lead Civil Engineer
NewAuto ApplyParadigm Power Delivery Inc.
Overland Park, Kansas🇺🇸On-site14 hours agoComplianceStructural AnalysisTechnical SupportEngineering - PP
Lead Electrical Engineer
NewAuto ApplyParadigm Power Delivery Inc.
Overland Park, Kansas🇺🇸On-site14 hours agoComplianceEngineering - B-
Technical Escalation Engineer
NewAuto ApplyBlink - The Employee App
Boston, Massachusetts🇺🇸Hybrid18 hours agoSQLSAMLSSO+4Engineering