PKI Engineer

SFE; United States; On-site; USD 110,000 - 150,000; Full time

Job summary

SFE in Minneapolis, MN is seeking a PKI Engineer with strong Venafi and Microsoft PKI experience to own enterprise PKI and certificate lifecycle management. You will architect, automate, and troubleshoot security infrastructure, integrations, and tooling to support certificate issuance, renewal, and revocation across the environment.

The role requires hands-on administration of Windows Server, AD integration, and networking components, plus scripting in PowerShell and familiarity with REST APIs

Qualifications

• Experience with Venafi and Microsoft PKI in enterprise environments.
• Strong certificate lifecycle management skills across large-scale infrastructures.
• Hands-on administration of Windows Server, AD integration, and networking components.

Responsibilities

• Own enterprise PKI architecture, deployment, and operations.
• Automate certificate issuance, renewal, revocation, and policy enforcement.
• Integrate PKI tooling with Venafi REST APIs and other systems; provide troubleshooting and incident response.

Skills

Venafi PKI

Microsoft PKI

Certificate lifecycle management

PowerShell scripting

Active Directory

Networking LAN/WAN

Firewalls & VPN

Tools

CAPI

JDK

F5 ACM integrations

Windows Server environments

VMware

Hyper-V

Job description

PKI Engineer

Minneapolis, MN

We are looking for an experienced Venafi & Microsoft PKI Engineer to join our team and work on enterprise PKI, certificate lifecycle management, and security infrastructure. Candidate should have strong hands-on experience in enterprise PKI and certificate management, along with good infrastructure, automation, and troubleshooting capabilities.

Strong hands-on experience with Venafi & Microsoft PKI

Certificate Lifecycle Management

Venafi REST APIs and REST API integrations

PowerShell scripting

CAPI, JDK, F5 & ACM integrations

Windows Server environments

VMware & Hyper-V

Active Directory administration and integration

Networking LAN/WAN, Firewalls & VPN