Enter a job title or keyword
Lead Identity Engineer PKI Venafi
Job Location:
Monthly Salary:
Posted:
29 September 2026 (Yesterday)
Posted:
Application Deadline:
27 December 2026
Application Deadline:
Vacancies:
1 Vacancy
Vacancies:
Job Summary
About the Role:
We are seeking a highly motivated and self-driven PKI/Venafi Engineer with strong experience in Public Key Infrastructure (PKI) Certificate Lifecycle Management (CLM) and cryptographic security solutions. The candidate will be responsible for managing enterprise PKI platforms automating certificate lifecycle processes supporting code-signing solutions and driving strategic PKI modernization initiatives across on-premises and cloud environments.
The role requires hands-on expertise in Microsoft ADCS Venafi Sectigo CLM cloud-native certificate management and associated cryptographic technologies. The individual should be capable of independently driving projects end-to-end with minimal supervision while collaborating effectively with technical and business stakeholders.
What Youll Do:
- Administer and support enterprise PKI environments including Microsoft ADCS Root & Issuing CAs OCSP CDP NDES certificate templates and registration authorities.
- Manage the complete certificate lifecycle including issuance renewal revocation replacement monitoring and compliance.
- Administer Venafi TLS Protect Sectigo CLM and AppViewX (preferred) driving certificate automation and reducing manual processes.
- Implement and support automated certificate management for short-lived certificates and enterprise-wide renewal programs.
- Configure Venafi policies workflows integrations certificate discovery inventory management and compliance monitoring.
- Design and support code-signing S/MIME and cryptographic services integrating with CI/CD and development platforms.
- Enable certificate automation across AWS Kubernetes cloud-native platforms load balancers application gateways and hybrid cloud environments.
- Manage PKI infrastructure components including ADCS clusters Entrust HSM Venafi Sectigo CLM OCSP responders NDES and external CAs.
- Identify and remediate certificate-related risks vulnerabilities expired self-signed rogue and non-compliant certificates.
- Provide L2/L3 support for PKI TLS/SSL trust-chain certificate enrolment renewal platform integration and ServiceNow workflow issues.
- Lead PKI transformation certificate automation and cloud security projects while partnering with infrastructure security DevOps and application teams.
- Create and maintain architecture documents SOPs runbooks DR procedures and provide technical guidance and knowledge-transfer sessions.
- 5 years of experience in PKI Certificate Lifecycle Management and Cryptography.
- Proven expertise in installing configuring and managing Microsoft Certificate Authorities (ADCS).
- Hands-on administration of Venafi and/or Sectigo CLM platforms.
- Experience delivering certificate automation code-signing cloud integration and PKI transformation projects.
- Exposure to cloud containerized and hybrid infrastructure environments.
- Strong knowledge of PKI X.509 Certificates Digital Signatures TLS/SSL Symmetric & Asymmetric Encryption CRL OCSP NDES Certificate Templates CA/RA and HSM technologies.
- Hands-on experience with Microsoft ADCS Venafi TLS Protect Sectigo CLM AppViewX (preferred) Entrust HSM Code Signing and S/MIME solutions.
- Strong administration skills on Windows and Linux servers.
- Experience with PowerShell scripting REST APIs automation frameworks ServiceNow AWS ACM and Kubernetes certificate management.
Preferred Certifications
- Venafi Certified Professional
- Microsoft Security / Windows Server Certifications
- CISSP CISM or CompTIA Security
About Simeio and What We Do
Simeio has over 650 talented employees across the globe. We have offices in USA (Atlanta HQ and Texas) India Canada Costa Rica and UK.
Founded in 2007 and now backed by private equity company ZMC Simeio is recognized as a top IAM provider by industry analysts.
Alongside Simeios identity orchestration tool Simeio IO - Simeio also partners with industry leading IAM software vendors to provide access management identity governance and administration privileged access management and risk intelligence services across on-premise cloud and hybrid technology environments.
Simeio provides services to numerous Fortune 1000 companies across all industries including financial services technology healthcare media retail public sector utilities and education.
Diversity & Inclusion
Simeio is an equal opportunity employer. If you require assistance with completing this application interviewing completing any pre-employment testing or otherwise participating in the employee selection process please direct your inquiries to our recruitment team - emailprotected.
About Your Application
We carefully review every application we receive. If your skills and experience match our needs well be in touch. If you dont hear from us within 10 days please dont be discouraged. We may retain your application for future opportunities. We also encourage you to check our careers page for other openings.
Simeio is an equal opportunity employer. If you require assistance with completing this application interviewing completing any pre-employment testing or otherwise participating in the employee selection process please direct your inquiries to any of the recruitment team at or 1 .
Required Experience:
Senior IC
About Company
Managed IAM services that executes and optimizes your entire Identity and Access Management (IAM) program, to achieve desired results
