Lead Identity Engineer - PKI / Venafi

Simeio; Bengaluru; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

Simeio is seeking a PKI/Venafi Engineer to administer and optimize certificate services across enterprise systems. You will manage ADCS, Venafi, and related cryptographic infrastructure, ensuring secure operations and compliance.

You will collaborate with IT teams and vendors to troubleshoot, automate, and improve PKI workflows, certificate templates, and audit readiness, while supporting S/MIME and code-signing initiatives.

Qualifications

• 4–7 years of experience supporting PKI environments.
• Hands-on experience with ADCS and certificate lifecycle management.
• Experience administering Venafi and/or AppViewX.

Responsibilities

• Manage and support enterprise PKI environments including ADCS and Venafi.
• Handle certificate issuance, renewal, revocation, and expiration management.
• Monitor PKI systems, inventories, and platform health.
• Troubleshoot certificate issues across Windows, Linux, and applications.
• Support certificate installation activities and guide app/infrastructure teams.
• Maintain Venafi workflows, integrations, and ServiceNow certificate processes.
• Create, manage, and publish certificate templates within ADCS.
• Monitor expiration schedules and coordinate renewals with stakeholders.
• Review PKI audit requirements and implement remediation actions.
• Support HSM-integrated PKI environments and cryptographic infrastructure.
• Assist with external certificate management (S/MIME, code-signing).
• Collaborate with teams and vendors to ensure seamless PKI operations.
• Develop and maintain operational procedures and technical documentation.

Skills

PKI concepts

ADCS

Venafi

AppViewX

L1/L2 PKI support

Certificate lifecycle

Windows/Linux servers

ServiceNow workflows

Incident/Problem/Change mgmt

S/MIME

PowerShell scripting

Security/compliance

Tools

ADCS

Venafi

AppViewX

ServiceNow

Entrust HSM

Job description

About the Role:

The PKI / Venafi Engineer is responsible for the administration, support, and optimization of Public Key Infrastructure (PKI) services and certificate lifecycle management platforms. This role focuses on managing digital certificates, supporting cryptographic services, maintaining PKI environments, and ensuring secure certificate operations across enterprise systems. The engineer will work closely with internal teams and external partners to provide operational support, troubleshooting, automation, and continuous improvement of PKI and Venafi services.

What You'll Do:

• Manage and support enterprise PKI environments, including Microsoft Active Directory Certificate Services (ADCS) and certificate lifecycle management platforms such as Venafi.
• Handle day-to-day certificate management operations, including certificate issuance, renewal, revocation, replacement, and expiration management.
• Monitor PKI systems, certificate inventories, and platform health to ensure service availability and compliance.
• Troubleshoot certificate-related issues across Windows, Linux, and application environments.
• Support certificate installation activities and provide guidance to application and infrastructure teams.
• Maintain and troubleshoot Venafi workflows, integrations, and ServiceNow-related certificate processes.
• Create, manage, and publish certificate templates within Microsoft ADCS environments.
• Monitor certificate expiration schedules and proactively coordinate renewals with stakeholders.
• Review PKI audit requirements, identify security risks, and implement remediation actions.
• Support and maintain HSM-integrated PKI environments and cryptographic infrastructure.
• Assist with external certificate management, S/MIME certificates, and code-signing certificate operations.
• Collaborate with internal teams and external vendors to ensure seamless integration and operation of PKI services.
• Develop and maintain operational procedures, technical documentation, and user guides related to PKI systems and certificate management.
• Participate in incident, problem, and change management activities while adhering to organizational standards and security policies.

What You Bring:

• 4-7 years of experience supporting Public Key Infrastructure (PKI) environments.
• Solid understanding of PKI concepts including digital certificates, digital signatures, certification authorities, CRLs, OCSP, NDES, certificate templates, and encryption technologies (symmetric, asymmetric, and hybrid encryption).
• Hands-on experience with Microsoft Active Directory Certificate Services (ADCS).
• Experience administering certificate lifecycle management platforms such as Venafi and/or AppViewX.
• Prior L1/L2 operational support experience in PKI and certificate management environments.
• Strong understanding of certificate lifecycle processes including issuance, renewal, revocation, expiration management, and deployment.
• Experience troubleshooting certificate installation and configuration issues across enterprise applications and servers.
• Hands-on experience with Windows and Linux server certificate configuration, deployment, and troubleshooting.
• Experience supporting enterprise cryptographic products and solutions.
• Familiarity with ServiceNow workflows and IT service management processes.
• Understanding of PKI auditing, risk assessment, security controls, and compliance requirements.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent verbal and written communication skills with the ability to engage technical and non-technical stakeholders.

Nice to Have:

• Experience with Entrust HSM administration and support.
• Experience managing ADCS PKI clusters.
• Knowledge of S/MIME implementation and support.
• Experience with code-signing certificate management.
• Familiarity with external Certificate Authorities such as Entrust and Sectigo.
• Exposure to PKI automation and scripting using PowerShell.
• Relevant security, PKI, or Microsoft certifications.

About Simeio and What We Do

Simeio has over 650 talented employees across the globe. We have offices in USA (Atlanta HQ and Texas), India, Canada, Costa Rica and UK.

Founded in 2007, and now backed by private equity company ZMC, Simeio is recognized as a top IAM provider by industry analysts.

Alongside Simeio's identity orchestration tool "Simeio IO", Simeio partners with industry-leading IAM software vendors to provide access management, identity governance and administration, privileged access management, and risk intelligence services across on-premises, cloud, and hybrid technology environments.

Simeio provides services to numerous Fortune 1000 companies across all industries including financial services, technology, healthcare, media, retail, public sector, utilities, and education.

Diversity & Inclusion

Simeio is an equal opportunity employer.