PKI & Venafi Architect - Enterprise Certificate Lifecycle

Realign Llc; Chicago (IL); On-site; USD 140,000 - 170,000; Full time

Benefits offered by this job

Health insurance

Job summary

Realign Llc is seeking an experienced PKI / Venafi Architect to design and manage enterprise PKI and certificate lifecycle solutions using Venafi. You will architect, implement, and administer the Venafi Trust Protection Platform across SSL/TLS, code-signing, and machine identities.

You will work with IT and security teams to integrate Venafi with Microsoft AD CS, Active Directory, HSMs, cloud environments, and various enterprise applications while developing automation via APIs and scripting.

Qualifications

• Experience designing enterprise PKI and certificate lifecycle solutions.
• Strong knowledge of cryptography and security standards.
• Proven ability to integrate Venafi with AD CS, Active Directory, and cloud environments.

Responsibilities

• Design and architect enterprise-wide PKI and certificate lifecycle management solutions.
• Architect, implement, and administer Venafi Trust Protection Platform.
• Manage lifecycle of SSL/TLS, code-signing, machine identities, and certificates.
• Define issuance, renewal, revocation, discovery, and automation processes.
• Integrate Venafi with AD CS, Active Directory, HSMs, cloud platforms, and enterprise apps.
• Develop certificate management and automation strategies using APIs and scripting.
• Configure and manage Venafi TLS Protect / Trust Protection Platform.
• Implement certificate discovery across servers, apps, databases, load balancers, and networks.
• Establish PKI security standards, governance, and best practices.
• Troubleshoot certificate issues and trust-chain problems with cross-team collaboration.

Skills

PKI architecture

Certificate management

Cryptography

Security standards

Tools

Venafi

Venafi Trust Protection Platform

AD CS

APIs & scripting

Job description

Realign Llc is seeking an experienced PKI / Venafi Architect to design and manage enterprise PKI and certificate lifecycle solutions using Venafi. You will architect, implement, and administer the Venafi Trust Protection Platform across SSL/TLS, code-signing, and machine identities.

You will work with IT and security teams to integrate Venafi with Microsoft AD CS, Active Directory, HSMs, cloud environments, and various enterprise applications while developing automation via APIs and scripting.