Venafi Engineer

Purple Hires Inc; Chicago (IL); On-site; USD 100,000 - 170,000; Full time

Job summary

Purple Hires Inc. is seeking a Venafi Engineer to manage enterprise machine identities and certificate lifecycles using Venafi across our environments.

The role requires experience with Venafi Trust Protection Platform, PKI, and automation via APIs or scripting, in a Windows/Linux and multi-cloud setting. Hybrid collaboration with security, network, and app teams is expected.

Qualifications

• Bachelor's degree in CS/IT or related field.
• 4–8 years of Venafi, PKI, or security/infrastructure experience.
• Strong PKI, TLS/SSL, and certificate lifecycle knowledge.

Responsibilities

• Administer Venafi Trust Protection Platform and related systems.
• Manage TLS/SSL certificate lifecycle: discovery, enrollment, renewal, revocation.
• Monitor cert expiration and resolve related issues.
• Configure Venafi policies, zones, workflows, and permissions.
• Integrate Venafi with AD/CA, load balancers, and web servers.

Skills

PKI & certificate lifecycle

TLS/SSL concepts

REST APIs

Troubleshooting

Communication

Windows & Linux

Scripting (PowerShell/Python/Shell)

Education

Bachelor's degree in CS/IT or related

Tools

Venafi Trust Protection Platform

Venafi TLS Protect

Microsoft AD CS

IIS/Apache/NGINX

Job description

Job Title: Venafi Engineer

Location: Chicago/Arizona

Job Description

We are looking for a Venafi Engineer to manage and support enterprise machine identity, TLS/SSL certificate lifecycle management, and PKI operations using the Venafi platform. The role will involve certificate discovery, provisioning, renewal, automation, troubleshooting, and integration with enterprise applications and infrastructure.

Key Responsibilities

• Administer and support the Venafi Trust Protection Platform.
• Manage the complete lifecycle of TLS/SSL certificates including discovery, enrollment, renewal, and revocation.
• Monitor certificate expiration and resolve certificate-related issues.
• Configure and maintain Venafi policies, zones, workflows, and permissions.
• Perform certificate discovery across servers, applications, cloud environments, and network devices.
• Integrate Venafi with Active Directory, CA/PKI, load balancers, web servers, and other enterprise systems.
• Automate certificate provisioning and renewal using APIs, scripts, or automation tools.
• Troubleshoot certificate, TLS/SSL, and Venafi integration issues.
• Work with application, infrastructure, security, and network teams to onboard certificates into Venafi.
• Maintain documentation, operational procedures, and certificate inventories.
• Support security and compliance requirements related to machine identities and digital certificates.

Required Skills

• Hands‑on experience with Venafi Trust Protection Platform / Venafi TLS Protect.
• Strong understanding of PKI, digital certificates, TLS/SSL, and certificate lifecycle management.
• Experience with certificate authorities such as Microsoft AD CS or other enterprise CAs.
• Knowledge of Windows and Linux/Unix environments.
• Experience with web servers such as IIS, Apache, and NGINX.
• Basic scripting knowledge in PowerShell, Python, or Shell scripting.
• Understanding of REST APIs and system integrations.
• Good troubleshooting and communication skills.

Preferred Skills

• Experience with Venafi APIs and automation.
• Knowledge of AWS/Azure cloud certificates and machine identities.
• Experience with load balancers such as F5.
• Knowledge of DevOps tools such as Jenkins, Ansible, or Terraform.
• Experience with certificate automation and enterprise security tools.

Experience

4 8 years of experience in Venafi, PKI, certificate management, cybersecurity, or infrastructure security.

Education

Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field.