PKI Developer

LanceSoft, Inc.; Minneapolis (MN); Hybrid; USD 140,000 - 190,000; Full time

Job summary

LanceSoft, Inc. seeks an experienced PKI & Security Architect to design and maintain enterprise PKI architecture, including Root CA, Issuing CA, CRL, OCSP, HSM, and trust frameworks.

You will develop certificate governance standards, policies, and cryptographic control frameworks, and drive automation across hybrid cloud and on-premises environments. The role commands leadership in Venafi platform architecture, administration of Venafi TPP, and defining onboarding standards, workflows, and

Qualifications

• 10+ years of PKI/crypto architecture experience.
• Experience with Venafi Platform and CLM.
• Ability to design highly available PKI/CLM platforms.

Responsibilities

• Lead enterprise PKI design, governance, and automation.
• Define onboarding standards, workflows, and access models.
• Collaborate with Security, Infra, Cloud, DevOps to deploy trust services.

Skills

PKI Architecture

Venafi Platform

Certificate Lifecycle Management

Security Architecture

Hybrid/Cloud Environments

Tools

Venafi TPP

HSM

CI/CD

Job description

PKI & Security ArchitectureDesign and maintain enterprise PKI architecture| including Root CA| Issuing CA| CRL| OCSP| HSM| and trust frameworks.Develop certificate governance standards| policies| and cryptographic control frameworks.Architect highly available and resilient PKI and CLM platforms.Drive enterprise machine identity and certificate management strategy.Venafi Platform ArchitectureDesign and administer Venafi Trust Protection Platform (TPP).Define onboarding standards| workflows| policies| reporting| discovery jobs| and access models.Architect integrations between Venafi and enterprise applications| cloud services| and security platforms.Lead Venafi platform upgrades| enhancements| and optimization initiatives. Certificate Lifecycle AutomationArchitect automated certificate provisioning and renewal solutions.Design automation frameworks using: oVenafi APIsovCertoPowerShelloPythonoAnsibleoGitHub ActionsoAzure DevOpsoCI/CD pipelinesDrive adoption of certificate automation across enterprise application portfolios.

Essential Skills:

We are seeking an experienced (10+ years) PKI Venafi Architect to lead the design| implementation| governance| and automation of enterprise Public Key Infrastructure (PKI) and Certificate Lifecycle Management (CLM) solutions. The ideal candidate will provide architecture leadership for machine identity management| certificate automation| cryptographic controls| and Venafi platform engineering across hybrid| cloud| and on-premises environments. This role will work closely with Security| Infrastructure| Cloud| DevOps| Identity & Access Management| and Application teams to build scalable and secure trust services.