Senior PKI & Venafi Engineer

About the role

We are seeking a highly skilled Senior PKI & Venafi Engineer to support and enhance the organization's Certificate Lifecycle Management (CLM) and Public Key Infrastructure (PKI) capabilities. This role will be responsible for application onboarding, certificate lifecycle automation, PKI operations, certificate governance, platform resiliency, and technical consultation across hybrid and cloud environments.

Responsibilities

• Provide technical consultation and solution recommendations to application teams.
• Design, implement, and support certificate lifecycle automation solutions.
• Develop automation patterns using:
  • Venafi Native Drivers
  • Venafi APIs
  • Cert Utilities
  • CI/CD Pipelines
  • GitHub Actions
  • Azure DevOps
  • PowerShell
  • Python
  • Ansible
• Automate certificate renewal, provisioning, deployment validation, and application restart activities.
• Drive reduction of manual certificate deployment processes and operational risk.
• Create reusable automation patterns and onboarding frameworks for adoption across the enterprise.
• Support internal PKI infrastructure and certificate authority services.
• Participate in:
  • Certificate Authority operations
  • CRL publication activities
  • Backup and recovery testing
  • Disaster Recovery exercises
  • Platform resiliency improvements
• Monitor certificate ecosystem health and availability.
• Support root and intermediate certificate management activities.
• Participate in major incident response and troubleshooting efforts.

Requirements

• Proficiency with Windows and Linux environments.
• Experience with Microsoft Azure, Kubernetes, and cloud-native platforms.
• Familiarity with tools and technologies such as:
  • WebLogic
  • IIS
  • F5
  • Kafka
  • Solace
  • Ping
• Strong background in Public Key Infrastructure (PKI).

Skills

• Certificate Lifecycle Management (CLM)
• Certificate automation using Venafi tools and APIs
• CI/CD pipelines (GitHub Actions, Azure DevOps)
• Scripting and automation (PowerShell, Python, Ansible)
• PKI operations and resiliency
• Microsoft Azure

Location: Chicago, IL (100% onsite)