Venafi Engineer / PKI Engineer

Job Title: Venafi Engineer / PKI Engineer
Location: Chicago, IL, Denver CO , Addison TX - Hybrid
Duration: 12 Month Contract

• 5 years in PKI engineering and certificate lifecycle management

• Hands-on experience with Venafi Trust Protection Platform and TLS Protect services.

• Strong knowledge of Windows Server, RHEL Linux, IIS, and networking (TCP/IP, DNS, HTTP, SSH)

• Advanced Windows troubleshooting

• Proficient in PowerShell (C# a plus)

• Experience with Venafi APIs and automation

• Understanding of encryption standards and HSMs

• Manage and maintain Venafi TPP for certificate issuance, renewal, and revocation

• Apply patches, perform upgrades, and validate functionality with minimal guidance

• Design and automate certificate workflows using Venafi APIs

• Support enterprise PKI, SSL/TLS, and related security controls

• Develop automation scripts (PowerShell/C#) to optimize certificate and Venafi operations

• Ensure adherence to security policies and best practices

• Partner with DevOps, IAM, and application teams on secure integrations

• Provide technical support and troubleshoot PKI-related issues

• Deep PKI and certificate management expertise

• Strong PowerShell and automation skills

• Proven experience maintaining secure machine identities across large enterprises