Role Descriptions: Key ResponsibilitiesPKI & Security ArchitectureDesign and maintain enterprise PKI architecture, including Root CA, Issuing CA, CRL, OCSP, HSM, and trust frameworks.Develop certificate governance standards, policies, and cryptographic control frameworks.Architect highly available and resilient PKI and CLM platforms.Drive enterprise machine identity and certificate management strategy.Venafi Platform ArchitectureDesign and administer Venafi Trust Protection Platform (TPP).Define onboarding standards, workflows, policies, reporting, discovery jobs, and access models.Architect integrations between Venafi and enterprise applications, cloud services, and security platforms.Lead Venafi platform upgrades, enhancements, and optimization initiatives. Certificate Lifecycle AutomationArchitect automated certificate provisioning and renewal solutions.Design automation frameworks using: oVenafi APIsovCertoPowerShelloPythonoAnsibleoGitHub ActionsoAzure DevOpsoCICD pipelinesDrive adoption of certificate automation across enterprise application portfolios.
Essential Skills: We are seeking an experienced (10+ years) PKI Venafi Architect to lead the design, implementation, governance, and automation of enterprise Public Key Infrastructure (PKI) and Certificate Lifecycle Management (CLM) solutions. The ideal candidate will provide architecture leadership for machine identity management, certificate automation, cryptographic controls, and Venafi platform engineering across hybrid, cloud, and on-premises environments. This role will work closely with Security, Infrastructure, Cloud, DevOps, Identity & Access Management, and Application teams to build scalable and secure trust services.
Skills: Identity and Access Management Implementation, Design & ArchitectureCyber Security - Information SecurityPublic Key InfrastructureMultifactor Authentication (MFA)
Experience Required: 8-10
