PKI Engineer with Venafi Expertise
Chicago, IL - USA
Job Summary
Role Descriptions: Certificate Lifecycle Management Administer and support enterprise Certificate Lifecycle Management (CLM) services.
Manage the complete certificate lifecycle including:
o Discovery
o Request
o Issuance
o RenewaloRevocation
o Deployment Monitoring
o Retirement Ensure certificates remain compliant with enterprise standards and industry requirements. Support certificate inventory management and visibility initiatives. Assist with remediation of expiring unmanaged self-signed and non-compliant certificates Venafi Platform Administration Administer and maintain the Venafi platform and supporting infrastructure. Configure and manage: policies Workflows Certificate Authorities Integration so Discovery jobs Notification so Reporting Access controls Support platform upgrades maintenance activities and technology refresh initiatives. Collaborate with Venafi support and vendors to resolve technical issues and implement enhancements. Application Onboarding & Solution Engineering Lead application onboarding activities into the Certificate Lifecycle Management platform. Assess application certificate requirements and define onboarding approaches. Design and implement automation patterns suitable for application needs. Partner with application teams to understand deployment architectures certificate formats trust requirements and operational processes. Support onboarding across:
oWindowsoLinuxoAzureoKubernetesoWebLogicoIISoF5oKafkaoSolaceoPingoCloud-native platforms Provide technical consultation and solution recommendations to application teams. Certificate Automation Design implement and support certificate lifecycle automation solutions. Develop automation patterns using: avanafil Native Driver so Venafi API so vCert Utilitieso CI/CD Pipelines GitHub ActionsoAzure DevOpso PowerShello Pythono Ansible Automate certificate renewal provisioning deployment validation and application restart reduction of manual certificate deployment processes and operational reusable automation patterns and onboarding frameworks for adoption across the Operations & Resiliency Support internal PKI infrastructure and certificate authority in: oCertificate Authority operationsoCRL publication activities Backup and recovery testingoDisaster Recovery exercisesoPlatform resiliency improvementsMonitor certificate ecosystem health and root and intermediate certificate management in major incident response and troubleshooting efforts Security & GovernanceSupport certificate governance and compliance certificate ownership metadata and accountability adherence to security standards for: oTLS/SSLoCertificate issuanceoCryptographic key managementoCertificate Authority controls
Essential Skills:
Job Description
We are seeking a highly skilled Senior PKI & Venafi Engineer to support and enhance the organizations Certificate Lifecycle Management (CLM) and Public Key Infrastructure (PKI) capabilities. This role will be responsible for application onboarding certificate lifecycle automation PKI operations certificate governance platform resiliency and technical consultation across hybrid and cloud successful candidate will serve as a subject matter expert for enterprise certificates PKI architecture Venafi Trust Protection Platform certificate automation patterns and operational support. The engineer will work closely with application teams infrastructure teams cloud teams security architects and vendors to ensure certificates are deployed monitored renewed and governed securely throughout their lifecycle. Responsibilities align closely to automation onboarding renewal discovery governance and resiliency objectives documented within the CLM program.
Skills: Digital : Microsoft AzurePublic Key Infrastructure
Experience Required: 10 & Above