PKI Engineer with Venafi

Certificate Lifecycle Management (CLM)

• Administer and support enterprise CLM services.
• Manage the end-to-end certificate lifecycle: Discovery, Request, Issuance, Renewal, Revocation, Deployment, Monitoring, and Retirement.
• Ensure compliance with enterprise standards and industry requirements.
• Maintain certificate inventory and visibility.
• Remediate expiring, unmanaged, self-signed, and non-compliant certificates.

Venafi Platform Administration

• Maintain the Venafi Trust Protection Platform and supporting infrastructure.
• Configure and manage:
• Policies and Workflows.
• Certificate Authorities (CAs) and Integrations.
• Discovery jobs, Notifications, and Reporting.
• Access controls.
• Execute platform upgrades, maintenance, and technology refreshes.
• Liaise with Venafi support and vendors for technical issue resolution and enhancements.

Application Onboarding & Solution Engineering

• Lead onboarding activities into the CLM platform.
• Assess application requirements and define custom onboarding approaches.
• Partner with teams to understand deployment architectures, formats, and trust requirements.
• Support diverse environments including:
• OS: Windows, Linux.
• Cloud/Orchestration: Azure, Kubernetes, Cloud-native platforms.
• Middleware/Tools: WebLogic, IIS, F5, Kafka, Solace, Ping.
• Provide technical consultation and solution recommendations to application owners.

Certificate Automation

• Design and implement lifecycle automation solutions to reduce manual processes and risk.
• Develop automation patterns using:
• Tools: Venafi Native Drivers, Venafi APIs, vCert Utilities.
• DevOps: CI/CD Pipelines, GitHub Actions, Azure DevOps.
• Scripting: PowerShell, Python, Ansible.
• Automate renewal, provisioning, deployment validation, and application restarts.
• Create reusable onboarding frameworks for enterprise-wide adoption.

PKI Operations & Resiliency

• Support internal PKI infrastructure and CA services.
• Manage CA operations and Certificate Revocation List (CRL) publications.
• Conduct backup/recovery testing and Disaster Recovery (DR) exercises.
• Monitor ecosystem health and improve platform resiliency.
• Manage root and intermediate certificates.
• Participate in major incident response and troubleshooting.

Security & Governance

• Support certificate governance and compliance initiatives.
• Maintain accurate records for certificate ownership, metadata, and accountability.
• Enforce security standards for:
• TLS/SSL and Certificate issuance.
• Cryptographic key management.
• Certificate Authority controls.

Work Authorization

• Applicants must be legally authorized to work in the United States.

Equal Employment Opportunity

• Themesoft Inc is an Equal Employment Opportunity employer. We consider qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by applicable federal, state, or local law.