Job Description
Senior PKI & Venafi Engineer
\n
Location: Chicago, IL
\n
Experience: 10+ Years
\n
Role Overview
\n
Seeking a Senior PKI & Venafi Engineer with strong expertise in Certificate Lifecycle Management (CLM), PKI operations, Venafi Trust Protection Platform, certificate automation, application onboarding and certificate governance across hybrid and cloud environments.
\n
Must-Have Skills
\n
\n
- \n
- Venafi Trust Protection Platform – administration and engineering
- PKI / Certificate Lifecycle Management (CLM)
- End-to-end certificate lifecycle: Discovery, Request, Issuance, Renewal, Revocation, Deployment, Monitoring and Retirement
- Venafi policies, workflows, Certificate Authorities, integrations, discovery jobs, notifications, reporting and access controls
- Certificate automation using:
- Venafi Native Drivers / APIs
- vCert Utilities
- CI/CD pipelines
- GitHub Actions / Azure DevOps
- PowerShell, Python, Ansible
- Microsoft Azure / cloud environments
- Application onboarding across Windows, Linux, Azure, Kubernetes, WebLogic, IIS, F5, Kafka, Solace and Ping
- Internal PKI / Certificate Authority operations
- TLS/SSL, cryptographic key management and certificate governance
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Key Responsibilities
\n
- \n
- Administer and support enterprise Venafi CLM services and PKI infrastructure.
- Manage the complete certificate lifecycle and maintain certificate inventory and compliance.
- Identify and remediate expiring, unmanaged, self-signed and non-compliant certificates.
- Configure Venafi policies, workflows, CAs, integrations, discovery jobs, notifications, reporting and access controls.
- Support Venafi upgrades, maintenance, technology refresh and vendor troubleshooting.
- Lead application onboarding and define certificate deployment/automation approaches.
- Design reusable certificate automation patterns using Venafi APIs, Native Drivers, vCert, PowerShell, Python and Ansible.
- Automate certificate renewal, provisioning, deployment validation and application restart activities.
- Integrate certificate automation with GitHub Actions and Azure DevOps CI/CD pipelines.
- Support PKI operations including CA services, CRL publication, root/intermediate certificate management, backup/recovery and DR exercises.
- Monitor PKI/CLM ecosystem health, availability and resiliency.
- Support certificate governance, ownership, metadata and compliance initiatives.
- Provide technical consultation to application, infrastructure, cloud and security teams.
- Participate in major incident troubleshooting and resolution.
- Work Authorization
- Applicants must be legally authorized to work in the United States.
- Equal Employment Opportunity
- Themesoft Inc is an Equal Employment Opportunity employer. We consider qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by applicable federal, state, or local law.
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n