PKI Engineer

Insight Global; Denver (CO); On-site; USD 90,000 - 120,000; Full time

Job summary

A leading technology staffing firm is seeking a Certificate Management Services Engineer for their Enterprise PKI and Crypto Technologies team. The role is critical for automating digital certificate lifecycle processes using the Venafi Trust Protection Platform. Ideal candidates have extensive PKI expertise, experience in Windows and Linux environments, and a strong background in automation scripting. This on-site position is based in either Denver, CO or Chicago, IL, requiring collaboration with various technical teams to ensure secure machine identities across enterprise systems.

Qualifications

• 5+ years of experience in PKI engineering and certificate lifecycle management.
• Hands-on experience with administering Venafi Trust Protection Platform.
• Strong knowledge of Windows Server, Linux (RHEL), and networking protocols.

Responsibilities

• Administer and maintain Venafi TPP backend processes for certificate provisioning.
• Design and implement automated certificate workflows leveraging Venafi APIs.
• Develop automation scripts using PowerShell or C# to streamline operations.

Skills

PKI engineering

Certificate lifecycle management

Venafi Trust Protection Platform

Windows Server

Linux (RHEL)

Networking protocols

Scripting (PowerShell)

Education

Bachelor’s degree in Computer Science

Tools

Venafi API

Job description

THIS JOB IS 5 DAYS A WEEK, ON-SITE, IN EITHER DENVER, CO OR CHICAGO, IL!

Required Skills & Experience

• 5+ years of experience in PKI engineering and certificate lifecycle management.
• Hands-on experience with administering Venafi Trust Protection Platform and TLS Protect services.
• Strong knowledge of Windows Server, Linux (RHEL), IIS, and networking protocols (TCP/IP, DNS, HTTP, SSH).
• Understanding of encryption standards and Hardware Security Modules (HSMs).

Nice to Have Skills & Experience

• Familiarity with cloud PKI solutions (AWS, Azure, GCP).
• Certifications in PKI, Venafi, or related security technologies.
• Experience in Agile environments and DevOps practices.
• Bachelor’s degree in Computer Science, Information Security, or related field.
• Proficiency in scripting languages (PowerShell preferred).
• Experience with Venafi API integrations and automation solutions.

Job Description

Insight Global is seeking a Certificate Management Services Engineer to join the Enterprise PKI and Crypto Technologies team at major financial institution. This role is critical for managing and automating digital certificate lifecycle processes using Venafi Trust Protection Platform (TPP). The ideal candidate will have deep expertise in PKI, certificate management, and automation, ensuring secure machine identities across enterprise systems. This role is 5 days a week on-site in Chicago, IL or Denver, CO.

Key Responsibilities

• Administer and maintain Venafi TPP backend processes for certificate provisioning, renewal, and revocation.
• Apply Venafi patches, upgrade environments, and fully test processes with little guidance.
• Design and implement automated certificate workflows leveraging Venafi APIs.
• Manage enterprise PKI infrastructure, including SSL/TLS and related security protocols.
• Develop automation scripts using PowerShell or C# to streamline certificate operations and Venafi backend processes.
• Ensure compliance with security standards and best practices.
• Collaborate with DevOps, IAM, and application teams for secure integrations.
• Provide technical support and troubleshooting for PKI-related issues.