Lead Identity Engineer - PKI / Venafi

Simeio; Bengaluru South; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

Simeio in Bengaluru, India is seeking a PKI/Venafi Engineer to administer and optimize PKI services, manage certificate lifecycles, and support cryptographic infrastructure across enterprise apps. You will work with ADCS, Venafi, AppViewX, and ServiceNow, troubleshoot across Windows and Linux, and drive automation with PowerShell.

Collaborate with internal teams and external partners to ensure secure certificate operations, maintain documentation, and align with security audits and compliance

Qualifications

• 4-7 years of PKI experience and hands-on ADCS administration.
• Strong PKI knowledge including certificates, CAs, CRLs, OCSP, NDES and templates.
• Experience with Venafi and/or AppViewX and related workflows.
• L1/L2 operational PKI support with Windows and Linux environments.
• Familiarity with ServiceNow ITSM workflows and security/compliance practices.

Responsibilities

• Manage and support enterprise PKI environments including ADCS and Venafi.
• Handle certificate issuance, renewal, revocation, replacement, and expiry management.
• Monitor PKI systems, inventories, and platform health for availability and compliance.
• Troubleshoot certificate installation/configuration across Windows, Linux, and apps.
• Maintain Venafi workflows and ServiceNow-related certificate processes.
• Develop and publish certificate templates within ADCS environments.
• Coordinate renewals with stakeholders and monitor expiry schedules.
• Review audit requirements and implement remediation for security controls.
• Support HSM-integrated PKI environments and cryptographic infrastructure.
• Collaborate with teams and vendors for seamless PKI integration.
• Create operational procedures and technical docs for PKI systems.

Skills

PKI concepts

Certificate lifecycle management

Troubleshooting

Stakeholder communication

Analytical thinking

Tools

Venafi

AppViewX

ServiceNow

PowerShell

Job description

About the Role:

The PKI / Venafi Engineer is responsible for the administration, support, and optimization of Public Key Infrastructure (PKI) services and certificate lifecycle management platforms. This role focuses on managing digital certificates, supporting cryptographic services, maintaining PKI environments, and ensuring secure certificate operations across enterprise systems. The engineer will work closely with internal teams and external partners to provide operational support, troubleshooting, automation, and continuous improvement of PKI and Venafi services.

What You'll Do:

• Manage and support enterprise PKI environments, including Microsoft Active Directory Certificate Services (ADCS) and certificate lifecycle management platforms such as Venafi.
• Handle day-to-day certificate management operations, including certificate issuance, renewal, revocation, replacement, and expiration management.
• Monitor PKI systems, certificate inventories, and platform health to ensure service availability and compliance.
• Troubleshoot certificate-related issues across Windows, Linux, and application environments.
• Support certificate installation activities and provide guidance to application and infrastructure teams.
• Maintain and troubleshoot Venafi workflows, integrations, and ServiceNow-related certificate processes.
• Create, manage, and publish certificate templates within Microsoft ADCS environments.
• Monitor certificate expiration schedules and proactively coordinate renewals with stakeholders.
• Review PKI audit requirements, identify security risks, and implement remediation actions.
• Support and maintain HSM-integrated PKI environments and cryptographic infrastructure.
• Assist with external certificate management, S/MIME certificates, and code-signing certificate operations.
• Collaborate with internal teams and external vendors to ensure seamless integration and operation of PKI services.
• Develop and maintain operational procedures, technical documentation, and user guides related to PKI systems and certificate management.
• Participate in incident, problem, and change management activities while adhering to organizational standards and security policies.
  What You Bring:
• 4-7 years of experience supporting Public Key Infrastructure (PKI) environments.
• Solid understanding of PKI concepts including digital certificates, digital signatures, certification authorities, CRLs, OCSP, NDES, certificate templates, and encryption technologies (symmetric, asymmetric, and hybrid encryption).
• Hands-on experience with Microsoft Active Directory Certificate Services (ADCS).
• Experience administering certificate lifecycle management platforms such as Venafi and/or AppViewX.
• Prior L1/L2 operational support experience in PKI and certificate management environments.
• Strong understanding of certificate lifecycle processes including issuance, renewal, revocation, expiration management, and deployment.
• Experience troubleshooting certificate installation and configuration issues across enterprise applications and servers.
• Hands-on experience with Windows and Linux server certificate configuration, deployment, and troubleshooting.
• Experience supporting enterprise cryptographic products and solutions.
• Familiarity with ServiceNow workflows and IT service management processes.
• Understanding of PKI auditing, risk assessment, security controls, and compliance requirements.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent verbal and written communication skills with the ability to engage technical and non-technical stakeholders.
  Nice to Have:
• Experience with Entrust HSM administration and support.
• Experience managing ADCS PKI clusters.
• Knowledge of S/MIME implementation and support.
• Experience with code-signing certificate management.
• Familiarity with external Certificate Authorities such as Entrust and Sectigo.
• Exposure to PKI automation and scripting using PowerShell.
• Relevant security, PKI, or Microsoft certifications.

About Simeio and What We Do

Simeio has over 650 talented employees across the globe. We have offices in USA (Atlanta HQ and Texas), India, Canada, Costa Rica and UK.

Founded in 2007, and now backed by private equity company ZMC, Simeio is recognized as a top IAM provider by industry analysts.

Alongside Simeio's identity orchestration tool "Simeio IO", Simeio partners with industry-leading IAM software vendors to provide access management, identity governance and administration, privileged access management, and risk intelligence services across on-premises, cloud, and hybrid technology environments.

Simeio provides services to numerous Fortune 1000 companies across all industries including financial services, technology, healthcare, media, retail, public sector, utilities, and education.

Diversity & Inclusion

Simeio is an equal opportunity employer.