Senior PKI Architect for Enterprise Certificate Automation

Beacon Hill Staffing Group; Raleigh (NC); On-site; USD 140,000 - 190,000; Full time

Job summary

Beacon Hill Staffing Group is seeking a Senior PKI Architect to lead enterprise certificate automation using Venafi and ServiceNow. The role oversees architecture design, policy definition, and implementation of automation across production environments.

The ideal candidate brings strong PKI expertise, experience with Venafi/TLS Protect, and AD CS integration, plus scripting skills in PowerShell or Python to support governance and delivery across security stakeholders.

Qualifications

• Senior enterprise PKI architecture including X.509, TLS, CA hierarchies and revocation.
• Hands-on experience with Venafi Trust Protection Platform or TLS Protect.
• Experience integrating Microsoft AD CS with public CAs.
• Ability to read/write PowerShell or Python.
• Consulting or advisory delivery experience.

Responsibilities

• Assess the PKI and certificate lifecycle environment and design the target architecture.
• Define standard certificate lifecycle patterns, policies and exception handling.
• Serve as the design authority for automation and production changes.
• Guide engineers and advise architecture and security stakeholders.

Skills

PKI architecture

Venafi TLS Protect

AD CS integration

PowerShell/Python

Consulting experience

Tools

Venafi Trust Protection Platform

TLS Protect

Microsoft AD CS

Job description

Beacon Hill Staffing Group is seeking a Senior PKI Architect to lead enterprise certificate automation using Venafi and ServiceNow. The role oversees architecture design, policy definition, and implementation of automation across production environments.

The ideal candidate brings strong PKI expertise, experience with Venafi/TLS Protect, and AD CS integration, plus scripting skills in PowerShell or Python to support governance and delivery across security stakeholders.