Vanafi Engineer

Position: Venafi Engineer

Location: Chicago, IL / Phoenix, Arizona

Job Summary

We are looking for a Venafi Engineer to manage and support enterprise machine identity, TLS/SSL certificate lifecycle management, and PKI operations using the Venafi platform. The role will involve certificate discovery, provisioning, renewal, automation, troubleshooting, and integration with enterprise applications and infrastructure.

Key Responsibilities

• Administer and support the Venafi Trust Protection Platform.
• Manage the complete lifecycle of TLS/SSL certificates including discovery, enrollment, renewal, and revocation.
• Monitor certificate expiration and resolve certificate-related issues.
• Configure and maintain Venafi policies, zones, workflows, and permissions.
• Perform certificate discovery across servers, applications, cloud environments, and network devices.
• Integrate Venafi with Active Directory, CA/PKI, load balancers, web servers, and other enterprise systems.
• Automate certificate provisioning and renewal using APIs, scripts, or automation tools.
• Troubleshoot certificate, TLS/SSL, and Venafi integration issues.
• Work with application, infrastructure, security, and network teams to onboard certificates into Venafi.
• Maintain documentation, operational procedures, and certificate inventories.
• Support security and compliance requirements related to machine identities and digital certificates.

Required Skills

• Hands-on experience with Venafi Trust Protection Platform / Venafi TLS Protect.
• Strong understanding of PKI, digital certificates, TLS/SSL, and certificate lifecycle management.
• Experience with certificate authorities such as Microsoft AD CS or other enterprise CAs.
• Knowledge of Windows and Linux/Unix environments.
• Experience with web servers such as IIS, Apache, and NGINX.
• Basic scripting knowledge in PowerShell, Python, or Shell scripting.
• Understanding of REST APIs and system integrations.
• Good troubleshooting and communication skills.

Preferred Skills

• Experience with Venafi APIs and automation.
• Knowledge of AWS/Azure cloud certificates and machine identities.
• Experience with load balancers such as F5.
• Knowledge of DevOps tools such as Jenkins, Ansible, or Terraform.
• Experience with certificate automation and enterprise security tools.

Experience

4–8 years of experience in Venafi, PKI, certificate management, cybersecurity, or infrastructure security.

Education

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.