Senior PKI & Venafi Engineer - Certificate Automation Lead

Realtek Consulting LLC; Chicago (IL); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Realtek Consulting LLC seeks a Senior PKI & Venafi Engineer to elevate enterprise Certificate Lifecycle Management (CLM) and PKI capabilities. The role covers onboarding, automation, governance, and operations across hybrid and cloud environments.

The engineer will serve as SME for certificates, Venafi Trust Protection Platform, and automation patterns, collaborating with application, infrastructure, cloud, and security teams to ensure secure deployment, monitoring, renewal, and governance.

Qualifications

• Expert in Venafi Trust Protection Platform administration, configuration, policies, workflows, discovery, and integrations.
• Proficient in PKI operations, certificate authorities, root/intermediate certs, and CRL publication.
• Experience in Certificate Lifecycle Management: discovery, issuance, renewal, revocation, deployment, monitoring, and retirement.
• Strong automation experience using Venafi APIs, Native Drivers, vCert utilities, Python, PowerShell, and Ansible.

Responsibilities

• Provide technical consultation to application teams and implement automation for renewal, provisioning, deployment validation, and restarts.
• Reduce manual certificate deployment and associated risks; create reusable automation patterns and onboarding frameworks.
• Maintain secure and compliant certificate management practices across enterprise environments.
• Collaborate with Venafi support teams and vendors to troubleshoot and implement platform enhancements.

Skills

Venafi TPP

PKI operations

Certificate lifecycle

Automation

DevOps CI/CD

Application onboarding

Security governance

Operational resiliency

Windows & Linux

Azure

Kubernetes

Tools

Venafi APIs

Venafi Native Drivers

vCert utilities

PowerShell

Python

Ansible

GitHub Actions

Azure DevOps

Job description

Realtek Consulting LLC seeks a Senior PKI & Venafi Engineer to elevate enterprise Certificate Lifecycle Management (CLM) and PKI capabilities. The role covers onboarding, automation, governance, and operations across hybrid and cloud environments.

The engineer will serve as SME for certificates, Venafi Trust Protection Platform, and automation patterns, collaborating with application, infrastructure, cloud, and security teams to ensure secure deployment, monitoring, renewal, and governance.