USA_Engineer

TALENT Software Services; Chicago (IL); On-site; USD 120,000 - 180,000; Full time

Job summary

TALENT Software Services is seeking a Senior PKI & Venafi Engineer to support enterprise Certificate Lifecycle Management (CLM) and PKI capabilities in a 100% onsite Chicago environment.

The role focuses on Venafi platform administration, automation patterns, onboarding of applications, and governance across hybrid/cloud environments. 10+ years of experience and strong collaboration with application, infrastructure, and security teams are required.

Qualifications

• Senior PKI & Venafi Engineer with extensive CLM/PKI experience.
• Experience administering Venafi and enterprise certificate lifecycles.
• Experience with hybrid/cloud environments and automation patterns.

Responsibilities

• Administer and support enterprise Certificate Lifecycle Management (CLM) services.
• Manage complete certificate lifecycle: discovery, issuance, renewal, revocation, deployment, monitoring, retirement.
• Provide Venafi platform administration and integrate with CI/CD pipelines.

Skills

PKI Engineering

Venafi

Automation

Azure

Windows

Linux

Kubernetes

WebLogic

IIS

F5

Tools

Venafi Platform

PKI infrastructure

Azure

Kubernetes

WebLogic

IIS

F5

Kafka

Solace

Job description

Description: **Please strictly adhere to the following resume naming convention:
ALL CAPS, NO SPACES B/T UNDERSCORES
PTN_US_GBAMSREQID_CandidateBeelineID
i.e. PTN_US_9999999_SKIPJOHNSON0413
Bill Rate-***
MSP Owner: Andres Villegas
Location: 333 S Wabash Ave, Chicago-IL. 100% onsite.
Duration: 6 months
Job Title: Certificate Lifecycle/ PKI Engineer with Venafi Expertise
Role Descriptions: Certificate Lifecycle ManagementAdminister and support enterprise Certificate Lifecycle Management (CLM) services.Manage the complete certificate lifecycle including: oDiscoveryoRequestoIssuanceoRenewaloRevocationoDeploymentoMonitoringoRetirementEnsure certificates remain compliant with enterprise standards and industry requirements.Support certificate inventory management and visibility initiatives.Assist with remediation of expiring| unmanaged| self-signed| and non-compliant certificatesVenafi Platform AdministrationAdminister and maintain the Venafi platform and supporting infrastructure.Configure and manage: oPoliciesoWorkflowsoCertificate AuthoritiesoIntegrationsoDiscovery jobsoNotificationsoReportingoAccess controlsSupport platform upgrades| maintenance activities| and technology refresh initiatives.Collaborate with Venafi support and vendors to resolve technical issues and implement enhancements.Application Onboarding & Solution EngineeringLead application onboarding activities into the Certificate Lifecycle Management platform.Assess application certificate requirements and define onboarding approaches.Design and implement automation patterns suitable for application needs.Partner with application teams to understand deployment architectures| certificate formats| trust requirements| and operational processes.Support onboarding across: oWindowsoLinuxoAzureoKubernetesoWebLogicoIISoF5oKafkaoSolaceoPingoCloud-native platformsProvide technical consultation and solution recommendations to application teams. Certificate AutomationDesign| implement| and support certificate lifecycle automation solutions.Develop automation patterns using: oVenafi Native DriversoVenafi APIsovCert UtilitiesoCI/CD PipelinesoGitHub ActionsoAzure DevOpsoPowerShelloPythonoAnsibleAutomate certificate renewal| provisioning| deployment validation| and application restart activities.Drive reduction of manual certificate deployment processes and operational risk.Create reusable automation patterns and onboarding frameworks for adoption across the enterprise.PKI Operations & ResiliencySupport internal PKI infrastructure and certificate authority services.Participate in: oCertificate Authority operationsoCRL publication activitiesoBackup and recovery testingoDisaster Recovery exercisesoPlatform resiliency improvementsMonitor certificate ecosystem health and availability.Support root and intermediate certificate management activities.Participate in major incident response and troubleshooting effortsSecurity & GovernanceSupport certificate governance and compliance initiatives.Maintain certificate ownership| metadata| and accountability records.Ensure adherence to security standards for: oTLS/SSLoCertificate issuanceoCryptographic key managementoCertificate Authority controls
Essential Skills: Job DescriptionWe are seeking a highly skilled Senior PKI & Venafi Engineer to support and enhance the organizations Certificate Lifecycle Management (CLM) and Public Key Infrastructure (PKI) capabilities. This role will be responsible for application onboarding| certificate lifecycle automation| PKI operations| certificate governance| platform resiliency| and technical consultation across hybrid and cloud environments.The successful candidate will serve as a subject matter expert for enterprise certificates| PKI architecture| Venafi Trust Protection Platform| certificate automation patterns| and operational support. The engineer will work closely with application teams| infrastructure teams| cloud teams| security architects| and vendors to ensure certificates are deployed| monitored| renewed| and governed securely throughout their lifecycle. Responsibilities align closely to automation| onboarding| renewal| discovery| governance| and resiliency objectives documented within the CLM program.
Skills: Digital : Microsoft Azure:Public Key Infrastructure
Experience Required: 10 & Above
Custom Fields:
Name: Work Assignment Location
Value: Onsite
Name: Type of Asset
Value: None
Name: Assets
Value: None
Name: Requisition ID
Value: 10943086
Name: Work Location CDF
Value: :Chicago, IL:
Name: Child
Value: BFSI US East - Capital Markets - II
Name: Business Vertical
Value: CL-BFSI Americas 2
Name: Parent
Value: IS-BFSI-US East-CapitalMarkets & NewEngland-Parent