Sr Technical Lead - Certificate Management Atlanta, GA

The Experient Group; Atlanta (GA); On-site; USD 100,000 - 130,000; Full time

Job summary

The Experient Group in Atlanta, Georgia, is seeking a professional to lead the design and integration of a centralized certificate management system. The role involves overseeing technical direction to unify tools like Zero Touch PKI and CyberArk Certificate Manager for efficient certificate issuance and management.

The ideal candidate has strong knowledge of PKI and experience with automation across various systems. This position supports collaboration and effective communication to achieve results.

Qualifications

• Strong working knowledge of PKI and the X.509 certificate standard.
• Hands-on integration experience with certificate management or PKI tooling.
• Experience automating certificate provisioning across heterogeneous systems.

Responsibilities

• Design the target-state architecture for centralized certificate lifecycle management.
• Integrate Zero Touch PKI and CyberArk Certificate Manager with existing systems.
• Build automation for certificate provisioning and renewal.
• Establish certificate discovery and inventory across devices.
• Define standards for certificate policy and key types.
• Work with teams to onboard systems onto the central platform.
• Set up monitoring and alerting for expirations and integration failures.

Skills

Strong working knowledge of PKI and the X.509 certificate standard

Hands-on integration experience with certificate management or PKI tooling

Experience automating certificate provisioning across heterogeneous systems

Proficiency with at least one scripting or programming language

Familiarity with secrets management

Job description

At Experient, we provide experience, technology, and transformation support to our clients, creating a dynamic work environment. We value collaboration, prioritize effective communication, and focus on delivering results quickly and practically. Whether you’re looking to deepen your expertise or take on new challenges, we’re here to support your journey every step of the way.

This role is responsible for leading the design and integration of a centralized certificate management system across a broad estate of systems. This role will own the technical direction for bringing tools like Zero Touch PKI and CyberArk Certificate Manager together into a single platform for issuing, renewing, and revoking certificates at scale.

What you’ll do

• Design the target-state architecture for centralized certificate lifecycle management (issuance, renewal, revocation, discovery, inventory).
• Integrate Zero Touch PKI and CyberArk Certificate Manager with existing systems, CAs, and secrets infrastructure.
• Build automation for certificate provisioning and renewal so that manual touchpoints and outage‑causing expirations go away.
• Establish certificate discovery and inventory across servers, load balancers, app services, and network devices, parsing X.509 fields like SAN and key usage to validate and dedupe what’s found.
• Define standards for certificate policy, key types, validity periods, and rotation.
• Work with platform, security, and application teams to onboard their systems onto the central platform.
• Set up monitoring and alerting for expirations, policy violations, and integration failures.

What you’ll bring

• Strong working knowledge of PKI and the X.509 certificate standard: certificate lifecycle, CAs, chains of trust, key management, and revocation (CRL/OCSP).
• Hands‑on integration experience with certificate management or PKI tooling.
• Experience automating certificate provisioning across heterogeneous systems (Linux, Windows, cloud, network devices, Kubernetes).
• Proficiency with at least one scripting or programming language for automation and integration work (Python, Go, or similar).
• Familiarity with secrets management and how certificates fit alongside it.
• Experience leading technical delivery: setting architecture, reviewing work, and bringing a team along.

Nice to have

• Direct experience with Zero Touch PKI and CyberArk Certificate Manager (formerly Venafi) is a strong plus.
• Experience with ACME and automated enrollment protocols.
• Knowledge of mTLS and service‑to‑service certificate use in microservice environments.
• Cloud‑native certificate services (AWS ACM/Private CA, Azure Key Vault, or GCP equivalents).
• Background in a regulated or audited environment.

Experient Group is an Equal Employment Opportunity (EEO) employer and welcomes all qualified applicants. Applicants will receive fair and impartial consideration without regard to race, sex, religion, national origin, age, sexual orientation, disability, veteran status, genetic data, or other legally protected status.

#LI-Hybrid