Senior PKI & Venafi Architect - Enterprise Machine Identity

Tata Consultancy Services Limited; Chicago (IL); On-site; USD 120,000 - 130,000; Full time

Benefits offered by this job

Discretionary Annual Incentive

Comprehensive Medical Coverage

Maternal & Parental Leaves

Auto & Home Insurance options

Certification & Training Reimbursement

Vacation & Holidays

Job summary

Tata Consultancy Services Limited seeks a senior PKI Architect in Chicago to lead enterprise PKI design, governance, and machine identity initiatives. You will implement scalable certificate solutions, integrate Venafi TP, and guide cross‑functional teams on policy and access models.

The role emphasizes deployment across Windows/AWS/Azure, governance compliance with standards like NIST and ISO, and strong scripting skills in PowerShell and Python to automate lifecycle workflows.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or related discipline.
• 10+ years of Information Security experience.
• 5+ years of hands-on PKI architecture experience.
• 5+ years of Venafi Trust Protection Platform experience.
• Strong expertise in X.509 Certificates, TLS/SSL, PKI, HSM Technologies, Digital Signatures, Cryptographic Key Management.

Responsibilities

• Design and maintain enterprise PKI architecture including Root CA, Issuing CA, CRL, OCSP, HSM, and trust frameworks.
• Develop certificate governance standards, policies, and cryptographic control frameworks.
• Architect highly available and resilient PKI and CLM platforms.
• Drive enterprise machine identity and certificate management strategy.
• Design and administer Venafi Trust Protection Platform (TPP).
• Define onboarding standards, workflows, policies, reporting, discovery jobs, and access models.

Skills

X.509 Certificates

TLS/SSL

PKI

HSM Integration

Digital Signatures

Key Management

Policy Management

Automation

PowerShell

Python

REST APIs

AWS

Azure

Governance

Education

Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related discipline

Tools

Venafi Trust Protection Platform

GitHub Actions

Ansible

Job description

Tata Consultancy Services Limited seeks a senior PKI Architect in Chicago to lead enterprise PKI design, governance, and machine identity initiatives. You will implement scalable certificate solutions, integrate Venafi TP, and guide cross‑functional teams on policy and access models.

The role emphasizes deployment across Windows/AWS/Azure, governance compliance with standards like NIST and ISO, and strong scripting skills in PowerShell and Python to automate lifecycle workflows.