Certificate Lifecycle Management (CLM) Consultant - EMEA

Entelligence is seeking a Certificate Lifecycle Management (CLM) Consultant to support external clients. The successful candidate must be able to work in a cross functional environment and interact with representatives from Entelligence and the end client.

The Consultant will serve as a trusted technical advisor, interacting directly with the customer’s personnel. The Consultant will lead customer engagements from solution architecture through deployment, integration, automation, and knowledge transfer, delivering secure, scalable Public Key Infrastructure (PKI) and certificate lifecycle management solutions across complex multi cloud, hybrid, and self hosted environments. The Consultant serves as the technical expert on project teams, provides technical direction and alternatives, and solves unusually complex technical problems with highly innovative solutions., * Work full time with the customer as the PKI and certificate lifecycle technical lead.

• Design, implement, and optimize enterprise PKI, including multi tier Certificate Authority architectures, Registration Authorities, and Hardware Security Module (HSM) backed key protection.
• Own end to end certificate lifecycle management: discovery, issuance, renewal, revocation, and compliance reporting.
• Drive automation, visibility, and reporting to improve certificate traceability and reduce overall risk posture.
• Integrate certificate services with Active Directory, AD CS, ADFS, and LDAP, and across cloud identity, certificate, and key management services.
• Lead technical workshops, architecture sessions, and customer meetings with both technical and business stakeholders.
• Develop high level designs, runbooks, and knowledge transfer materials, and ensure a smooth operational handoff.
• Assess and remediate PKI designs to reduce security and operational risk, following modern cryptographic best practices.

• Excellent written and verbal communication skills.
• Fluency in both English and Spanish, written and verbal, is required.
• Minimum 5 years hands on experience with enterprise PKI and certificate lifecycle management as a primary focus, and 8+ years in enterprise IT.
• Deep expertise in multi tier Certificate Authority architectures (offline root and issuing CAs), X.509, Registration Authorities, certificate revocation (CRL, OCSP), and Hardware Security Modules.
• Strong knowledge of enterprise networking, Windows Server, and Linux and Unix environments.
• Hands on experience integrating identity and security platforms with Active Directory, AD CS, ADFS, and LDAP.
• Experience deploying and supporting enterprise security solutions across AWS, Microsoft Azure, and Google Cloud Platform, including certificate and key management services.
• Understanding of high availability and disaster recovery architectures.
• Proven experience delivering Professional Services engagements from solution design through implementation, testing, and knowledge transfer.
• Ability to manage multiple customer engagements simultaneously while maintaining high standards of quality and customer satisfaction.

PREFERRED:

• Hands on implementation experience with a certificate lifecycle management platform such as Venafi, Keyfactor, AppViewX, or DigiCert ONE.
• Certificate lifecycle automation (ACME, SCEP, EST) and scripting with PowerShell or Python, including REST API integration.
• Experience with TLS and SSL enabled technologies such as F5, Citrix NetScaler, IIS, Apache HTTP Server, Oracle WebLogic, or IBM WebSphere.
• Microsoft SQL Server administration; VMware or Hyper V; Kubernetes or cert manager; HashiCorp Vault.
• Knowledge of enterprise IT operations and ITIL practices.
• Industry recognized security certifications such as CISSP, GIAC, or equivalent.

• Competitive base salary
• Comprehensive benefits package aligned to your country of employment
• Paid time off and holidays