PKI Engineer with Venafi Expertise – Lifecycle Certificate

METRIX IT SOLUTIONS INC; Chicago (IL); On-site; USD 120,000 - 160,000; Full time

Job summary

METRIX IT SOLUTIONS INC in Chicago, IL, is seeking a Senior PKI Engineer with Venafi expertise to manage Certificate Lifecycle Management (CLM) and PKI operations on hybrid/cloud environments. The role focuses on onboarding applications, automating certificate workflows, and ensuring governance and resiliency across platforms.

The ideal candidate will administer the Venafi platform, integrate with CI/CD pipelines, and collaborate with application, security, and infrastructure teams to deploy,

Qualifications

• Enterprise PKI/CLM experience with Venafi platform.
• Experience administering Venafi and certificate lifecycle automation.

Responsibilities

• Administer and support Certificate Lifecycle Management (CLM).
• Manage Venafi platform administration and integration tasks.
• Lead application onboarding into Certificate Lifecycle Management platform.
• Design and implement automation patterns for certificate workflows.
• Support PKI operations, governance, and platform resiliency.
• Collaborate with cross-functional teams to ensure secure certificate deployment.

Skills

PKI

Venafi expertise

Automation

Onboarding

Cloud & hybrid environments

Tools

Venafi Native Drivers

Venafi APIs

Cert Utilities

CI/CD Pipelines

GitHub Actions

Azure DevOps

PowerShell

Python

Ansible

Job description

Position: PKI Engineer with Venafi Expertise - Lifecycle Certificate

Location -: Chicago, IL - 100% onsite

Contract

Certificate Lifecycle Management

Administer and support enterprise Certificate Lifecycle Management (CLM) services. Manage the complete certificate lifecycle including:

• Discovery
• Request
• Issuance
• Renewal
• Revocation
• Deployment
• Monitoring
• Retirement

Ensure certificates remain compliant with enterprise standards and industry requirements. Support certificate inventory management and visibility initiatives. Assist with remediation of expiring | unmanaged | self-signed | and non-compliant certificates.

Venafi Platform Administration

Administer and maintain the Venafi platform and supporting infrastructure.

Configure and manage:

• Policies
• Workflows
• Certificate Authorities
• Integrations
• Discovery jobs
• Notifications
• Reporting
• Access controls

Support platform upgrades | maintenance activities | and technology refresh initiatives. Collaborate with Venafi support and vendors to resolve technical issues and implement enhancements.

Application Onboarding & Solution Engineering

Lead application onboarding activities into the Certificate Lifecycle Management platform. Assess application certificate requirements and define onboarding approaches. Design and implement automation patterns suitable for application needs. Partner with application teams to understand deployment architectures | certificate formats | trust requirements | and operational processes. Support onboarding across:

• Windows
• Linux
• Azure
• Kubernetes
• WebLogic
• IIS
• F5
• Kafka
• Solace
• Ping
• Cloud-native platforms

Provide technical consultation and solution recommendations to application teams.

Certificate Automation

Design | implement | and support certificate lifecycle automation solutions. Develop automation patterns using:

• Venafi Native Drivers
• Venafi APIs
• Cert Utilities
• CI/CD Pipelines
• GitHub Actions
• Azure DevOps
• PowerShell
• Python
• Ansible

Automate certificate renewal | provisioning | deployment validation | and application restart activities. Drive reduction of manual certificate deployment processes and operational risk. Create reusable automation patterns and onboarding frameworks for adoption across the enterprise.

PKI Operations & Resiliency

Support internal PKI infrastructure and certificate authority services. Participate in:

• Certificate Authority operations
• CRL publication activities
• Backup and recovery testing
• Disaster Recovery exercises
• Platform resiliency improvements

Monitor certificate ecosystem health and availability. Support root and intermediate certificate management activities. Participate in major incident response and troubleshooting efforts.

Security & Governance

Support certificate governance and compliance initiatives. Maintain certificate ownership | metadata | and accountability records. Ensure adherence to security standards for:

• TLS/SSL
• Certificate issuance
• Cryptographic key management
• Certificate Authority controls

Essential Skills: Job Description

We are seeking a highly skilled Senior PKI & Venafi Engineer to support and enhance the organizations Certificate Lifecycle Management (CLM) and Public Key Infrastructure (PKI) capabilities. This role will be responsible for application onboarding | certificate lifecycle automation | PKI operations | certificate governance | platform resiliency | and technical consultation across hybrid and cloud environments.

The successful candidate will serve as a subject matter expert for enterprise certificates | PKI architecture | Venafi Trust Protection Platform | certificate automation patterns | and operational support. The engineer will work closely with application teams | infrastructure teams | cloud teams | security architects | and vendors to ensure certificates are deployed | monitored | renewed | and governed securely throughout their lifecycle. Responsibilities align closely to automation | onboarding | renewal | discovery | governance | and resiliency objectives documented within the CLM program.