PowerShell Automation Engineer

We are seeking an experienced Certificate Management Services Engineer to manage and automate digital certificate lifecycle processes using the Venafi Trust Protection Platform (TPP). The ideal candidate will have deep expertise in PKI, certificate automation, and secure machine identity management across enterprise environments.

________________________________________

Key Responsibilities

• Administer and maintain Venafi TPP processes for certificate provisioning, renewal, and revocation.

• Develop automation solutions using PowerShell or C# to streamline certificate and Venafi /or PKI certification backend operations.

• Apply Venafi patches and upgrades, including testing and documentation with minimal guidance.

• Design and implement automated certificate workflows using Venafi APIs./or, any other API

• Ensure compliance with security standards and best practices.

• Collaborate with DevOps, IAM, Engineering, Deployment, and Operations teams to support secure integrations and drive design adoption.

• Troubleshoot issues in Windows Server 2022 and RHEL/Unix environments.

• Make engineering decisions and implement technical automation solutions.

• Operate independently and take initiative in a structured environment.

________________________________________

Required Qualifications

• 5+ years of experience in PKI engineering and certificate lifecycle management.

• Strong knowledge of encryption technologies (symmetric/asymmetric cryptography, digital signatures, certificate authorities).

• Proficiency in automation scripting (PowerShell or C#) and clear communication of technical solutions.

• Hands-on experience with CI/CD pipelines.

• Familiarity with code signing and securing cloud-based applications.

• Extensive experience with PKI, TLS certificate management, and SDLC practices .

• Hands-on experience with Venafi TPP, TLS Protect, or similar certificate management platforms.

• Strong understanding of Windows Server, RHEL/Linux, IIS, and networking protocols (TCP/IP, DNS, SSH).

• Strong troubleshooting skills on Windows platforms.

• Experience integrating and automating with Venafi APIs.

• Excellent analytical, organizational, verbal, and written communication skills.

• Ability to manage multiple priorities in fast-paced environments.

• Adaptability to changing requirements and ambiguity.

• Ability to influence and align teams to a technical vision.

• Self starter with strong motivation and curiosity; able to work with minimal guidance.

________________________________________

Preferred Qualifications

• Familiarity with cloud PKI offerings (AWS, Azure, GCP).

• Certifications in PKI, Venafi, or related security technologies.

• Experience in Agile and DevOps environments.

• Experience troubleshooting certificate provisioning issues and managing Venafi configurations.

• Ability to create/update Ansible Tower/AAP/OpenSource playbooks.

• Familiarity with deploying containerized applications.

• Bachelor’s degree in Computer Science, Information Security, or a related field.