Enterprise CLM Operations Support Engineer – PKI, Venafi/CyberArk

Position Summary

Seeking an experienced Enterprise Certificate Lifecycle Management (CLM) Operations Support Engineer with hands-on experience in PKI, SSL/TLS certificate management, Venafi/CyberArk, ADCS, automation, and enterprise certificate operations.

Key Responsibilities

• Manage end-to-end certificate lifecycle: discovery, enrollment, issuance, renewal, revocation, replacement, and retirement.
  
• Administer and troubleshoot enterprise CLM platforms, connectors, templates, and enrollment policies.
  
• Support PKI, Microsoft ADCS, Certificate Authorities, certificate chains, SAN, EKU, CRL/OCSP, and Windows Certificate Store.
  
• Develop automation using PowerShell, Python, or Bash and integrate certificate workflows through REST APIs and ACMEv2.
  
• Support certificates across Kubernetes cert-manager, Azure Key Vault, AWS ACM, KMS/Secrets Manager, and enterprise applications.
  
• Monitor certificate expiry, connector health, API failures, and renewal exceptions.
  
• Prepare SLA/KPI reports and operational dashboards.
  
• Support P1–P4 incidents, major incidents, RCA, problem management, and 24x7 on-call rotation when required.
  
• Maintain SOPs, runbooks, and knowledge documentation.
  

Essential Skills

• Enterprise Certificate Lifecycle Management (CLM)
  
• PKI / SSL/TLS / Microsoft ADCS
  
• Venafi or CyberArk Certificate Manager
  
• PowerShell scripting
  
• REST APIs and ACMEv2
  
• Windows Certificate Store / CAPI
  
• Certificate troubleshooting and lifecycle operations
  

Preferred Skills

• Keyfactor, DigiCert Trust Lifecycle Manager, AppViewX
  
• Kubernetes cert-manager
  
• Azure Key Vault, AWS ACM/KMS
  
• OpenSSL, keytool
  
• Python/Bash
  
• Splunk, Dynatrace, Prometheus, Grafana
  

Certifications – Preferred

CyberArk Sentry – Certificate Manager | Venafi Certified Professional | Microsoft Windows Server/Identity | CKA | ITIL v4