Remote PKI & Venafi Architect — Master Machine Identity

Okaya Inc; West Chicago (IL); Remote; USD 150,000 - 190,000; Full time

Job summary

Okaya Inc. is seeking a PKI Venafi Architect to design and operate enterprise PKI and CLM platforms in a 100% remote setting.

You will manage Root/Issuing CAs, certificate governance, and machine identity initiatives across cloud and on-prem environments, integrating Venafi into enterprise apps and services. You will lead platform upgrades, automate certificate lifecycle tasks, and ensure compliance with NIST, PCI-DSS, and ISO standards, leveraging Venafi TPP, APIs, and CI/CD tooling.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related discipline.
• 10+ years of Information Security experience.
• 5+ years of hands-on PKI architecture experience.
• 5+ years of Venafi Trust Protection Platform experience.
• Strong expertise in X.509 Certificates, TLS/SSL, PKI, CLM, CRL/OCSP, HSM Technologies, Digital Signatures, Cryptographic Key Management.

Responsibilities

• Certificate Lifecycle Automation: Architect automated certificate provisioning and renewal solutions.
• Design automation frameworks using Venafi APIs, vCert, PowerShell, Python, Ansible, GitHub Actions, Azure DevOps, CI/CD pipelines.
• Drive adoption of certificate automation across enterprise applications.
• Application & Cloud Integration: Lead application onboarding into CLM services and support certificate deployment across Windows Server, Linux/Unix, IIS, Apache, Tomcat, WebLogic, Kubernetes, Azure, AWS, F5 Load Balancers, Kafka, Solace, PingFederate.
• Provide architecture guidance and troubleshooting for complex trust and certificate-related issues.
• Governance & Compliance: Ensure compliance with NIST, PCI-DSS, SOX, ISO 27001, FedRAMP, and enterprise security standards; conduct cryptographic risk assessments and certificate posture reviews.

Job description

Okaya Inc. is seeking a PKI Venafi Architect to design and operate enterprise PKI and CLM platforms in a 100% remote setting.

You will manage Root/Issuing CAs, certificate governance, and machine identity initiatives across cloud and on-prem environments, integrating Venafi into enterprise apps and services. You will lead platform upgrades, automate certificate lifecycle tasks, and ensure compliance with NIST, PCI-DSS, and ISO standards, leveraging Venafi TPP, APIs, and CI/CD tooling.