PKI Venafi Architect

Job description Below

PKI & Security Architecture

• Design and maintain enterprise PKI architecture, including Root CA, Issuing CA, CRL, OCSP, HSM, and trust frameworks.
• Develop certificate governance standards, policies, and cryptographic control frameworks.
• Architect highly available and resilient PKI and CLM platforms.
• Drive enterprise machine identity and certificate management strategy.

Venafi Platform Architecture

• Design and administer Venafi Trust Protection Platform (TPP).
• · Design and administer Venafi Trust Protection Platform (TPP).
• · Define onboarding standards, workflows, policies, reporting, discovery jobs, and access models.
• · Architect integrations between Venafi and enterprise applications, cloud services, and security platforms.
• · Lead Venafi platform upgrades, enhancements, and optimization initiatives.

Roles & Responsibilities

• Certificate Lifecycle Automation
• · Architect automated certificate provisioning and renewal solutions.
• · Design automation frameworks using:
• o Venafi APIs
• o vCert
• o PowerShell
• o Python
• o Ansible
• o GitHub Actions
• o Azure DevOps o CI/CD pipelines 
• · Drive adoption of certificate automation across enterprise application portfolios. Application & Cloud Integration 
• · Lead application onboarding into CLM services. 
• · Support certificate deployment and automation across: 
• o Windows Server 
• o Linux/Unix 
• o IIS 
• o Apache o Tomcat o WebLogic 
• o Kubernetes 
• o Azure 
• o AWS 
• o F5 Load Balancers 
• o Kafka 
• o Solace 
• o PingFederate 
• · Provide architecture guidance and troubleshooting support for complex trust and certificate-related issues. 
• Governance & Compliance 
• · Ensure compliance with NIST, PCI-DSS, SOX, ISO 27001, FedRAMP, and enterprise security standards. 
• · Conduct cryptographic risk assessments and certificate posture reviews. 
• · Define certificate ownership models and governance processes. 
• · Support audits and regulatory compliance activities 
• Required Qualifications 
• · Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related discipline. 
• · 10+ years of Information Security experience. 
• · 5+ years of hands-on PKI architecture experience. 
• · 5+ years of Venafi Trust Protection Platform experience. 
• · Strong expertise in: 
• o X.509 Certificates 
• o TLS/SSL 
• o PKI 
• o CLM o CRL/OCSP 
• o HSM Technologies 
• o Digital Signatures 
• o Cryptographic Key Management 
• · Experience designing PKI solutions in Azure and AWS environments. 
• · Strong scripting skills using PowerShell and Python. 
• Preferred Qualifications 
• · CISSP, CISM, CCSP, or equivalent certification. 
• · Venafi Certified Professional/Architect certification. 
• · Experience with:
• o Keyfactor 
• o DigiCert 
• o Entrust 
• o Microsoft ADCS 
• o HashiCorp Vault 
• o Azure Key Vault 
• o AWS Certificate Manager 
• · Experience operating in BFSI or other highly regulated environments.