What are the responsibilities and job description for the PKI Venafi Architect position at Vaarida Technologies llc?
Job description Below
PKI & Security Architecture
- Design and maintain enterprise PKI architecture, including Root CA, Issuing CA, CRL, OCSP, HSM, and trust frameworks.
- Develop certificate governance standards, policies, and cryptographic control frameworks.
- Architect highly available and resilient PKI and CLM platforms.
- Drive enterprise machine identity and certificate management strategy.
Venafi Platform Architecture
- Design and administer Venafi Trust Protection Platform (TPP).
- Design and administer Venafi Trust Protection Platform (TPP).
- Define onboarding standards, workflows, policies, reporting, discovery jobs, and access models.
- Architect integrations between Venafi and enterprise applications, cloud services, and security platforms.
- Lead Venafi platform upgrades, enhancements, and optimization initiatives.
Roles & Responsibilities
- Certificate Lifecycle Automation
- Architect automated certificate provisioning and renewal solutions.
- Design automation frameworks using:
- o Venafi APIs
- o vCert
- o PowerShell
- o Python
- o Ansible
- o GitHub Actions
- o Azure DevOps o CI/CD pipelines
- Drive adoption of certificate automation across enterprise application portfolios. Application & Cloud Integration
- Lead application onboarding into CLM services.
- Support certificate deployment and automation across:
- o Windows Server
- o Linux/Unix
- o IIS
- o Apache o Tomcat o WebLogic
- o Kubernetes
- o Azure
- o AWS
- o F5 Load Balancers
- o Kafka
- o Solace
- o PingFederate
- Provide architecture guidance and troubleshooting support for complex trust and certificate-related issues.
- Governance & Compliance
- Ensure compliance with NIST, PCI-DSS, SOX, ISO 27001, FedRAMP, and enterprise security standards.
- Conduct cryptographic risk assessments and certificate posture reviews.
- Define certificate ownership models and governance processes.
- Support audits and regulatory compliance activities
- Required Qualifications
- Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related discipline.
- 10 years of Information Security experience.
- 5 years of hands-on PKI architecture experience.
- 5 years of Venafi Trust Protection Platform experience.
- Strong expertise in:
- o X.509 Certificates
- o TLS/SSL
- o PKI
- o CLM o CRL/OCSP
- o HSM Technologies
- o Digital Signatures
- o Cryptographic Key Management
- Experience designing PKI solutions in Azure and AWS environments.
- Strong scripting skills using PowerShell and Python.
- Preferred Qualifications
- CISSP, CISM, CCSP, or equivalent certification.
- Venafi Certified Professional/Architect certification.
- Experience with:
- o Keyfactor
- o DigiCert
- o Entrust
- o Microsoft ADCS
- o HashiCorp Vault
- o Azure Key Vault
- o AWS Certificate Manager
- Experience operating in BFSI or other highly regulated environments.