Senior PKI Architect

Beacon Hill Staffing Group; Raleigh (NC); On-site; USD 140,000 - 190,000; Full time

Job summary

Beacon Hill Staffing Group is seeking a Senior PKI Architect to lead enterprise certificate automation using Venafi and ServiceNow. The role oversees architecture design, policy definition, and implementation of automation across production environments.

The ideal candidate brings strong PKI expertise, experience with Venafi/TLS Protect, and AD CS integration, plus scripting skills in PowerShell or Python to support governance and delivery across security stakeholders.

Qualifications

• Senior enterprise PKI architecture including X.509, TLS, CA hierarchies and revocation.
• Hands-on experience with Venafi Trust Protection Platform or TLS Protect.
• Experience integrating Microsoft AD CS with public CAs.
• Ability to read/write PowerShell or Python.
• Consulting or advisory delivery experience.

Responsibilities

• Assess the PKI and certificate lifecycle environment and design the target architecture.
• Define standard certificate lifecycle patterns, policies and exception handling.
• Serve as the design authority for automation and production changes.
• Guide engineers and advise architecture and security stakeholders.

Skills

PKI architecture

Venafi TLS Protect

AD CS integration

PowerShell/Python

Consulting experience

Tools

Venafi Trust Protection Platform

TLS Protect

Microsoft AD CS

Job description

ROLE SUMMARY

Leads PKI and certificate lifecycle architecture for enterprise certificate automation using Venafi (CyberArk Certificate Manager) and ServiceNow.

RESPONSIBILITIES

• Assess the PKI and certificate lifecycle environment and design the target architecture.
• Define standard certificate lifecycle patterns, policies and exception handling.
• Serve as the design authority for automation and production changes.
• Guide engineers and advise architecture and security stakeholders.

REQUIRED QUALIFICATIONS

• Senior enterprise PKI architecture: X.509, TLS, CA hierarchies, certificate templates and revocation.
• Hands-on Venafi Trust Protection Platform or TLS Protect.
• Microsoft AD CS and public CA integration.
• Ability to read and write PowerShell or Python.
• Consulting or advisory delivery experience.

PREFERRED QUALIFICATIONS

Keyfactor, AppViewX or DigiCert Trust Lifecycle Manager; Venafi certification; regulated-industry experience

ROLE SUMMARY

Leads PKI and certificate lifecycle architecture for enterprise certificate automation using Venafi (CyberArk Certificate Manager) and ServiceNow.

RESPONSIBILITIES

• Assess the PKI and certificate lifecycle environment and design the target architecture.
• Define standard certificate lifecycle patterns, policies and exception handling.
• Serve as the design authority for automation and production changes.
• Guide engineers and advise architecture and security stakeholders.

REQUIRED QUALIFICATIONS

• Senior enterprise PKI architecture: X.509, TLS, CA hierarchies, certificate templates and revocation.
• Hands-on Venafi Trust Protection Platform or TLS Protect.
• Microsoft AD CS and public CA integration.
• Ability to read and write PowerShell or Python.
• Consulting or advisory delivery experience.

PREFERRED QUALIFICATIONS

Keyfactor, AppViewX or DigiCert Trust Lifecycle Manager; Venafi certification; regulated-industry experience

Desired Skills and Experience

ROLE SUMMARY

Leads PKI and certificate lifecycle architecture for enterprise certificate automation using Venafi (CyberArk Certificate Manager) and ServiceNow.

RESPONSIBILITIES

• Assess the PKI and certificate lifecycle environment and design the target architecture.
• Define standard certificate lifecycle patterns, policies and exception handling.
• Serve as the design authority for automation and production changes.
• Guide engineers and advise architecture and security stakeholders.

REQUIRED QUALIFICATIONS

• Senior enterprise PKI architecture: X.509, TLS, CA hierarchies, certificate templates and revocation.
• Hands-on Venafi Trust Protection Platform or TLS Protect.
• Microsoft AD CS and public CA integration.
• Ability to read and write PowerShell or Python.
• Consulting or advisory delivery experience.

PREFERRED QUALIFICATIONS

Keyfactor, AppViewX or DigiCert Trust Lifecycle Manager; Venafi certification; regulated-industry experience

Beacon Hill is an equal opportunity employer and individuals with disabilities and/or protected veterans are encouraged to apply.

California residents:

Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

Company Profile: Beacon Hill Technologies, a premier National Information Technology Staffing Group, provides world class technology talent across all industries utilizing a complete suite of staffing services. Beacon Hill Technologies' dedicated team of recruiting and staffing experts consistently delivers quality IT professionals to solve our customers' technical and business needs. Beacon Hill Technologies covers a broad spectrum of IT positions, including Project Management and Business Analysis, Programming/Development, Database, Infrastructure, Quality Assurance, Production/Support and ERP roles.

Learn more about Beacon Hill and our specialty divisions, Beacon Hill Associates, Beacon Hill Financial, Beacon Hill HR, Beacon Hill Legal, Beacon Hill Life Sciences and Beacon Hill Technologies by visiting www.bhsg.com.

Benefits Information:

Beacon Hill offers a robust benefit package including, but not limited to, medical, dental, vision, and federal and state leave programs as required by applicable agency regulations to those that meet eligibility. Upon successfully being hired, details will be provided related to our benefit offerings.

We look forward to working with you.

Beacon Hill. Employing the Future