isCompletedInterview

jobTitle

location

productDomainEngineering

skills

yearsOfExperience

Senior PKI/Venafi Architect

<div><strong>Job Title: Senior PKI/Venafi Architect </strong></div><div><strong>Location:</strong> Remote</div><div> <strong>Employment Type:</strong> Full-Time</div><div> <strong>Experience Level:</strong> 12+ Years</div><div class="ql-align-center"><br></div><div class="ql-align-center"><br></div><div><strong>Job Summary:</strong></div><div>We are seeking a highly experienced and strategic <strong>Senior PKI/Venafi Architect</strong> with deep expertise in <strong>Venafi</strong>, <strong>PKI-DSS architecture</strong>, <strong>cryptography mechanisms</strong>, and <strong>cloud environments</strong>. This is a critical, greenfield opportunity to lead end-to-end <strong>discovery, design, implementation, and support</strong> of enterprise-grade PKI and certificate lifecycle management solutions. Ideal candidates will have a strong architectural background and proven success in delivering secure, scalable, and compliant cryptographic infrastructures across hybrid cloud environments.</div><div class="ql-align-center"><br></div><div class="ql-align-center"><br></div><div><strong>Key Responsibilities:</strong></div><ul><li>Lead the <strong>architecture, engineering, and integration</strong> of Public Key Infrastructure (PKI) and certificate management systems using <strong>Venafi Trust Protection Platform</strong>.</li><li>Drive all phases of the project lifecycle: <strong>discovery, design, implementation, support</strong>, and optimization.</li><li>Develop enterprise <strong>PKI-DSS (Public Key Infrastructure – Data Security Standards)</strong> aligned with compliance, audit, and security frameworks.</li><li>Architect secure, scalable cryptographic solutions involving <strong>digital certificates, TLS/SSL, key management, encryption mechanisms</strong>, and secure protocols.</li><li>Oversee integration of PKI and cryptographic services with <strong>cloud platforms (AWS, Azure, GCP)</strong> and DevSecOps toolchains.</li><li>Define and enforce policies for <strong>certificate lifecycle management</strong>, including issuance, renewal, rotation, and revocation.</li><li>Partner with security, infrastructure, and application teams to ensure secure adoption of cryptographic services.</li><li>Evaluate emerging technologies, contribute to <strong>security roadmap</strong>, and continuously improve cryptographic posture.</li></ul><div class="ql-align-center"><br></div><div><strong>Required Qualifications:</strong></div><ul><li>12+ years of experience in <strong>Information Security Architecture</strong>, with at least 5 years specializing in <strong>PKI, certificate management, and cryptography</strong>.</li><li>Hands-on experience with <strong>Venafi Trust Protection Platform</strong> – policy configuration, workflow setup, agent integrations, etc.</li><li>Strong understanding of <strong>PKI architecture</strong>, <strong>CA hierarchy</strong>, HSMs, OCSP, CRLs, and key protection mechanisms.</li><li>Deep knowledge of <strong>cryptographic standards</strong> (RSA, ECC, AES, SHA, TLS/SSL, etc.) and security protocols.</li><li>Experience in deploying PKI/certificate solutions in <strong>cloud (AWS, Azure, GCP)</strong> and hybrid environments.</li><li>Proven track record of working as an <strong>Architect</strong>, leading security design sessions, risk assessments, and solution implementations.</li><li>Strong scripting or automation skills (e.g., PowerShell, Python, REST APIs) for certificate lifecycle automation.</li><li>Familiarity with security frameworks like NIST, ISO 27001, PCI-DSS, and regulatory compliance.</li></ul><div class="ql-align-center"><br></div><div><strong>Preferred Qualifications:</strong></div><ul><li>Venafi or other relevant certifications.</li><li>Experience with HSMs (Thales, SafeNet, AWS CloudHSM).</li></ul><div><br></div><div><br></div>