Lead Identity Engineer - PKI / Venafi

About the role

We are seeking a highly motivated and self-driven PKI/Venafi Engineer with strong experience in Public Key Infrastructure (PKI), Certificate Lifecycle Management (CLM), and cryptographic security solutions. The candidate will be responsible for managing enterprise PKI platforms, automating certificate lifecycle processes, supporting code-signing solutions, and driving strategic PKI modernization initiatives across on-premises and cloud environments.

What you'll do

• Administer and support enterprise PKI environments, including Microsoft ADCS, Root & Issuing CAs, OCSP, CDP, NDES, certificate templates, and registration authorities
• Manage the complete certificate lifecycle including issuance, renewal, revocation, replacement, monitoring, and compliance
• Administer Venafi TLS Protect, Sectigo CLM, and AppViewX (preferred), driving certificate automation and reducing manual processes
• Implement and support automated certificate management for short-lived certificates and enterprise-wide renewal programs
• Configure Venafi policies, workflows, integrations, certificate discovery, inventory management, and compliance monitoring

What you need

• 5–9 yrs of experience
• Linux
• CISSP
• CISM
• AWS
• Kubernetes
• ServiceNow
• Chartered Accountant

Good to have

• REST APIs
• Windows Server
• PowerShell
• Cloud security
• CI/CD
• SOP writing