Years of Experience

• 3-6 years of experience in Public Key Infrastructure (PKI), Certificate Management, Cybersecurity, IAM, PAM, or Infrastructure Security.

General Description

• Provide day-to-day administration, monitoring, and operational support for enterprise PKI and Venafi certificate management solutions, ensuring secure management of digital certificates and cryptographic assets.
• Support certificate lifecycle management activities including discovery, issuance, renewal, revocation, replacement, and compliance reporting across enterprise environments.
• Collaborate with infrastructure, security, application, network, and cloud teams to support PKI integrations, certificate onboarding, troubleshooting, and process improvements.
• Perform incident resolution, root cause analysis, documentation, and operational support activities to maintain the security, availability, and compliance of PKI services.

Years of Experience

• 3-6 years of experience in Public Key Infrastructure (PKI), Certificate Management, Cybersecurity, IAM, PAM, or Infrastructure Security.

General Description

• Provide day-to-day administration, monitoring, and operational support for enterprise PKI and Venafi certificate management solutions, ensuring secure management of digital certificates and cryptographic assets.
• Support certificate lifecycle management activities including discovery, issuance, renewal, revocation, replacement, and compliance reporting across enterprise environments.
• Collaborate with infrastructure, security, application, network, and cloud teams to support PKI integrations, certificate onboarding, troubleshooting, and process improvements.
• Perform incident resolution, root cause analysis, documentation, and operational support activities to maintain the security, availability, and compliance of PKI services.

Technical Requirements

• Hands-on experience with Venafi Trust Protection Platform (TPP) and/or Venafi TLS Protect, including certificate discovery, lifecycle management, and operational support.
• Strong understanding of PKI concepts including:
  • Digital Certificates
  • Certificate Authorities (CA)
  • Registration Authorities (RA)
  • Certificate Signing Requests (CSR)
  • Key Generation
  • Certificate Revocation Lists (CRL)
  • Online Certificate Status Protocol (OCSP)
• Experience managing the complete certificate lifecycle, including certificate issuance, renewal, revocation, replacement, and expiration management.
• Experience onboarding applications, servers, load balancers, network devices, and cloud services into Venafi-managed certificate ecosystems.
• Knowledge of cryptographic standards and algorithms including RSA, ECC, SHA-2, PKCS, TLS/SSL, and X.509 certificates.
• Experience supporting enterprise Certificate Authorities such as:
  • Microsoft ADCS
  • DigiCert
  • Entrust
  • Sectigo
  • GlobalSign
  • Other public and private CAs
• Experience managing and troubleshooting SSL/TLS certificates across:
  • Windows Servers
  • Linux/Unix Servers
  • Web Servers (IIS, Apache, NGINX)
  • Application Servers
  • Network Devices
• Familiarity with certificate deployment and automation using: PowerShell, Python, Shell Scripting, REST APIs.
• Experience integrating Venafi with enterprise platforms such as: Active Directory, LDAP, SIEM Solutions, ITSM Platforms, Cloud Platforms, DevOps Toolchains

Working knowledge of cloud environments including AWS, Azure, and GCP, with understanding of cloud-native certificate and key management services.

Experience supporting certificate management for containers and modern platforms such as Docker, Kubernetes, OpenShift, and CI/CD pipelines.

Understanding of Hardware Security Modules (HSMs), key protection mechanisms, and certificate security best practices.

• Knowledge of security and compliance requirements including NIST, ISO 27001, PCI-DSS, SOX, HIPAA, and GDPR.
• Ability to monitor certificate health, identify expiring certificates, perform risk assessments, and support remediation activities.
• Strong troubleshooting, analytical, and problem-solving skills with the ability to provide L2 operational support and incident resolution for PKI environments.

Soft Skills

• Good communication for cross-functional collaboration and readiness to participate in on-call rotation.
• Ability to present solutions to clients remotely and in person if needed.
• Good documentation skills that will enable creation of design documents for the technical solutions proposed.

Certifications (Good to Have)

•  Venafi Security Administrator (VSA20)

Educational Qualifications

• University degree in IT or/and IT Security