PKI Venafi Architect

Location: Chicago, IL (Onsite)

Employment Type: Contract

Job Overview: We are seeking an experienced PKI / Venafi Architect to design, implement, and govern enterprise certificate lifecycle management and Public Key Infrastructure (PKI) solutions. The ideal candidate will have strong hands-on experience with Venafi Trust Protection Platform, enterprise PKI, digital certificates, certificate lifecycle automation, and security architecture. The candidate will work closely with security, infrastructure, application, DevOps, and architecture teams to establish scalable certificate management, automation, governance, and compliance across enterprise environments.

Key Responsibilities: Design and architect enterprise PKI and certificate lifecycle management solutions using Venafi. Lead implementation, configuration, and administration of Venafi Trust Protection Platform. Define certificate discovery, enrollment, issuance, renewal, revocation, and retirement processes. Develop strategies for automated certificate lifecycle management and reduce certificate-related outages. Integrate Venafi with enterprise applications, servers, cloud platforms, load balancers, APIs, and DevOps/CI-CD environments. Design and manage Certificate Authorities (CA), certificate policies, templates, trust chains, and key management processes. Establish certificate governance, ownership, standards, policies, and compliance controls. Troubleshoot certificate, TLS/SSL, PKI, and integration-related issues across enterprise environments. Collaborate with application and infrastructure teams to onboard certificates and automate certificate deployment. Develop integration solutions using REST APIs, scripting, and automation tools. Define security architecture, access controls, auditing, monitoring, and operational procedures for PKI and certificate management. Support migration from legacy certificate-management solutions to Venafi. Provide technical leadership, architecture documentation, standards, and best practices.