Job Title: Certificate Lifecycle/ PKI Engineer with Venafi Expertise

THEMESOFT; Chicago (IL); Sur place; USD 120 000 - 160 000; Plein temps

Résumé du poste

The Themesoft Inc. certificate ecosystem is managed onsite in Chicago, and the team is seeking a Senior PKI Engineer with Venafi expertise to lead certificate lifecycle automation, governance, and platform resiliency.

The role focuses on onboarding applications, renewal workflows, and secure certificate operations across hybrid/cloud environments. As a subject matter expert, you will partner with application and infrastructure teams to ensure certificates are deployed, renewed, and governed

Qualifications

• Experience with certificate lifecycle management and PKI operations.
• Knowledge of Venafi Trust Protection Platform and integration patterns.
• Ability to design automation for onboarding, renewal, discovery, governance and resiliency.

Responsabilités

• Administrate and support enterprise Certificate Lifecycle Management services.
• Manage complete certificate lifecycle including discovery, issuance, renewal, deployment, monitoring and revocation.
• Ensure certificates comply with enterprise standards and industry requirements.
• Provide automation patterns for certificate lifecycle and onboarding across applications and platforms.
• Collaborate with Venafi support and vendors to resolve issues and implement enhancements.

Connaissances

Venafi expertise

PKI

Automation

Security governance

Outils

Venafi APIs

vCert Utilities

CI/CD Pipelines

GitHub Actions

Azure DevOps

PowerShell

Python

Ansible

Description du poste

Job Title: Certificate Lifecycle/ PKI Engineer with Venafi Expertise

Job Id : OOJ - 27155

Posted Date : 09/15/2026

Experience : -

Job Type : Contractual

Location : Chicago, IL

Overview :

Job Title: Certificate Lifecycle/ PKI Engineer with Venafi Expertise
Location:Chicago-IL

Work Arrangement: Onsite EmploymentType:Contract ContractDuration:6-12+ Months

Key Responsibilities

KeyResponsibilities :

Certificate Lifecycle Management Administer and support enterprise Certificate Lifecycle Management (CLM) services.

Manage the complete certificate lifecycle including: DiscoveryoRequestoIssuanceoRenewaloRevocationoDeploymentoMonitoringoRetirement

Ensure certificates remain compliant with enterprise standards and industry requirements.

Support certificate inventory management and visibility initiatives.

Assist with remediation of expiring| unmanaged| self-signed| and non-compliant certificates Venafi Platform Administration Administer and maintain the Venafi platform and supporting infrastructure.

Configure and manage:

• Policies
• Workflows
• Certificate
• Authorities
• Integrations
• Discovery jobs
• Notifications
• Reporting
• Access controls

Support platform upgrades| maintenance activities| and technology refresh initiatives.

Collaborate with Venafi support and vendors to resolve technical issues and implement enhancements. Application Onboarding & Solution Engineering

Lead application onboarding activities into the Certificate Lifecycle Management platform.

Assess application certificate requirements and define onboarding approaches.

Design and implement automation patterns suitable for application needs.

Partner with application teams to understand deployment architectures| certificate formats| trust requirements| and operational processes.

Support onboarding across: oWindowsoLinuxoAzureoKubernetesoWebLogicoIISoF5oKafkaoSolaceoPingoCloud-native platforms Provide technical consultation and solution recommendations to application teams. Certificate Automation Design| implement| and support certificate lifecycle automation solutions.

Develop automation patterns using :

• Venafi Native Drivers
• Venafi APIs
• vCert Utilities
• CI/CD Pipelines
• GitHub Actions
• Azure DevOps
• PowerShell
• python
• Ansible

Automate certificate renewal| provisioning| deployment validation| and application restart activities.

Drive reduction of manual certificate deployment processes and operational risk.

Create reusable automation patterns and onboarding frameworks for adoption across the enterprise.

PKI Operations & Resiliency Support internal PKI infrastructure and certificate authority services.

Participate in:

• Certificate Authority operations
• CRL publication activities
• Backup and recovery testing
• Disaster Recovery exercises
• Platform resiliency improvements

Monitor certificate ecosystem health and availability.

Support root and intermediate certificate management activities.

Participate in major incident response and troubleshooting efforts Security & Governance Support certificate governance and compliance initiatives.

Maintain certificate ownership| metadata| and accountability records.

Ensure adherence to security standards for:

• TLS/SSL
• certificate issuance
• cryptographic key management
• certificate Authority controls

Essential Skills: Job Description

We are seeking a highly skilled Senior PKI & Venafi Engineer to support and enhance the organizations Certificate Lifecycle Management (CLM) and Public Key Infrastructure (PKI) capabilities.

This role will be responsible for application onboarding| certificate lifecycle automation| PKI operations| certificate governance| platform resiliency| and technical consultation across hybrid and cloud environments.

The successful candidate will serve as a subject matter expert for enterprise certificates| PKI architecture| Venafi Trust Protection Platform| certificate automation patterns| and operational support.

The engineer will work closely with application teams| infrastructure teams| cloud teams| security architects| and vendors to ensure certificates are deployed| monitored| renewed| and governed securely throughout their lifecycle.

Responsibilities align closely to automation| onboarding| renewal| discovery| governance| and resiliency objectives documented within the CLM program.

WorkAuthorization

ApplicantsmustbelegallyauthorizedtoworkintheUnitedStates.

EqualEmploymentOpportunity

[ThemesoftInc]isanEqualEmploymentOpportunityemployer.Weconsiderqualifiedapplica