PKI Engineer/Architect
Description
Role : PKI Engineer/Architect
Location : Chicago IL
Mode : Onsite
Need on W2
PKI & Security Architecture
Design and maintain enterprise PKI architecture| including Root CA| Issuing CA| CRL| OCSP| HSM| and trust frameworks.
Develop certificate governance standards| policies| and cryptographic control frameworks.
Architect highly available and resilient PKI and CLM platforms.
Drive enterprise machine identity and certificate management strategy.
Venafi Platform Architecture
Design and administer Venafi Trust Protection Platform (TPP).
Define onboarding standards| workflows| policies| reporting| discovery jobs| and access models.
Architect integrations between Venafi and enterprise applications| cloud services| and security platforms.
Lead Venafi platform upgrades| enhancements| and optimization initiatives.
Certificate Lifecycle Automation
Architect automated certificate provisioning and renewal solutions.
Design automation frameworks using:
O Venafi APIsovCert
O PowerShell
O Python
O Ansible
O GitHub Actions
O Azure DevOps
O CI/CD pipelines
Drive adoption of certificate automation across enterprise application portfolios.
Essential Skills:
We are seeking an experienced (10+ years) PKI Venafi Architect to lead the design| implementation| governance| and automation of enterprise Public Key Infrastructure (PKI) and Certificate Lifecycle Management (CLM) solutions. The ideal candidate will provide architecture leadership for machine identity management| certificate automation| cryptographic controls| and Venafi platform engineering across hybrid| cloud| and on-premises environments. This role will work closely with Security| Infrastructure| Cloud| DevOps| Identity & Access Management| and Application teams to build scalable and secure trust services.