What are the responsibilities and job description for the Security Engineer with PKI & Venafi position at iTech US, Inc.?
Job Title: : Security Engineer with PKI & Venafi Location: Chicago IL Duration: 12 Months
Role Description:
- Design and maintain enterprise PKI architecture| including Root CA| Issuing CA| CRL| OCSP| HSM| and trust frameworks.
- Develop certificate governance standards| policies| and cryptographic control frameworks.
- Architect highly available and resilient PKI and CLM platforms.
- Drive enterprise machine identity and certificate management strategy.
- Venafi Platform Architecture
- Design and administer Venafi Trust Protection Platform (TPP).Define onboarding standards| workflows| policies| reporting| discovery jobs| and access models.
- Architect integrations between Venafi and enterprise applications| cloud services| and security platforms.
- Lead Venafi platform upgrades| enhancements| and optimization initiatives. Certificate Lifecycle Automation Architect automated certificate provisioning and renewal solutions.
- Design automation frameworks using:
- Venafi APIs
- vCerto
- PowerShell
- Python
- Ansible
- GitHub
- Actions
- Azure DevOps
- CI/CD pipelines
- Drive adoption of certificate automation across enterprise application portfolios.
Essential Skills:
- We are seeking an experienced (10 years) PKI Venafi Architect to lead the design| implementation| governance| and automation of enterprise Public Key Infrastructure (PKI) and Certificate Lifecycle Management (CLM) solutions.
- The ideal candidate will provide architecture leadership for machine identity management| certificate automation| cryptographic controls| and Venafi platform engineering across hybrid| cloud| and on-premises environments.
- This role will work closely with Security| Infrastructure| Cloud| DevOps| Identity & Access Management| and Application teams to build scalable and secure trust services.
Education: At least a bachelor s degree (or equivalent experience) in Computer Science, Software/Electronics Engineering, Information Systems, or a closely related field is required for the project