Lead PKI & Venafi Platform Architect

Themesoft Inc; Chicago (IL); On-site; USD 150,000 - 210,000; Full time

Job summary

Themesoft Inc in Chicago seeks a PKI / Venafi Architect with 10+ years of experience to lead enterprise PKI design, governance, and automation across hybrid, cloud, and on‑prem environments.

You will own Venafi Trust Protection Platform (TPP) architecture, certificate onboarding standards, and integrations with enterprise applications, CI/CD, and security solutions, ensuring scalable trust services.

Qualifications

• 10+ years in PKI, security architecture, or related security engineering domains.
• Strong enterprise PKI architecture experience incl. Root/Issuing CA, CRL, OCSP, and HSM.
• Hands-on Venafi TPP architecture, administration, integration, and optimization.
• Experience with CLM, machine identity management, governance, and cryptographic controls.
• Proven ability to design automated certificate provisioning, renewal, rotation, and revocation workflows.
• Familiarity with Venafi APIs and automation tech such as vCert, PowerShell, Python, and Ansible.
• Experience integrating certificate automation with GitHub Actions, Azure DevOps, and CI/CD.
• Ability to collaborate with security, infrastructure, cloud, DevOps, IAM, and application teams.

Responsibilities

• Design, implement, and govern enterprise PKI architecture across hybrid, cloud, and on-prem environments.
• Lead Venafi Platform architecture, upgrades, and governance for scalable certificate management.
• Architect and implement automated certificate provisioning, renewal, and revocation workflows.
• Drive machine identity management, cryptographic controls, and trusted infrastructure standards.

Skills

Security architecture

PKI architecture

Machine identity management

Cross-functional collaboration

Leadership

Education

Bachelor's degree in CS/IS/Security

Tools

Venafi TPP

vCert

PowerShell

Python

Ansible

Job description

Themesoft Inc in Chicago seeks a PKI / Venafi Architect with 10+ years of experience to lead enterprise PKI design, governance, and automation across hybrid, cloud, and on‑prem environments.

You will own Venafi Trust Protection Platform (TPP) architecture, certificate onboarding standards, and integrations with enterprise applications, CI/CD, and security solutions, ensuring scalable trust services.