IT Security Specialist III

Certificate Management Services Engineer

We are seeking an experienced Certificate Management Services Engineer to manage and automate digital certificate lifecycle processes using the Venafi Trust Protection Platform (TPP). The ideal candidate will have deep expertise in PKI, certificate automation, and secure machine identity management across enterprise environments.

Location: Denver, Chicago, Washington DC, Charlotte - required to be in an office 5 days a week.

Salary Range:

A Market - $104.00/hour B Market - $101.00/hour (Charlotte)

Required Skills & Qualifications:

• 5 years of experience in PKI engineering and certificate lifecycle management.
• Strong knowledge of encryption technologies (symmetric/asymmetric cryptography, digital signatures, certificate authorities).
• Proficiency in automation scripting (PowerShell or C#) and clear communication of technical solutions.
• Hands-on experience with CI/CD pipelines.
• Familiarity with code signing and securing cloud-based applications.
• Extensive experience with PKI, TLS certificate management, and SDLC practices.
• Hands-on experience with Venafi TPP, TLS Protect, or similar certificate management platforms.
• Strong understanding of Windows Server, RHEL/Linux, IIS, and networking protocols (TCP/IP, DNS, SSH).
• Strong troubleshooting skills on Windows platforms.
• Experience integrating and automating with Venafi APIs.
• Excellent analytical, organizational, verbal, and written communication skills.
• Ability to manage multiple priorities in fast-paced environments.
• Adaptability to changing requirements and ambiguity.
• Ability to influence and align teams to a technical vision.
• Self-starter with strong motivation and curiosity; able to work with minimal guidance.
• Prior work experience at client or in client's Industry.

Applicants must be able to work directly for Artech on W2.

Preferred Skills & Qualifications:

• Familiarity with cloud PKI offerings (AWS, Azure, GCP).
• Certifications in PKI, Venafi, or related security technologies.
• Experience in Agile and DevOps environments.
• Experience troubleshooting certificate provisioning issues and managing Venafi configurations.
• Ability to create/update Ansible Tower/AAP/OpenSource playbooks.
• Familiarity with deploying containerized applications.
• Bachelor's degree in Computer Science, Information Security, or a related field.

Day-to-Day Responsibilities:

• Administer and maintain Venafi TPP processes for certificate provisioning, renewal, and revocation.
• Develop automation solutions using PowerShell or C# to streamline certificate and Venafi backend operations.
• Apply Venafi patches and upgrades, including testing and documentation with minimal guidance.
• Design and implement automated certificate workflows using Venafi APIs.
• Ensure compliance with security standards and best practices.
• Collaborate with DevOps, IAM, Engineering, Deployment, and Operations teams to support secure integrations and drive design adoption.
• Troubleshoot issues in Windows Server 2022 and RHEL/Unix environments.
• Make engineering decisions and implement technical automation solutions.
• Operate independently and take initiative in a structured environment.

Company Benefits & Culture:

• Competitive compensation package.
• Opportunities for professional growth and development.
• Inclusive and collaborative work environment.