> Markdown version of [/jobs/ext/2840127-certificate-lifecycle-management-clm-consultant-latam](https://www.wearedevelopers.com/jobs/ext/2840127-certificate-lifecycle-management-clm-consultant-latam). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Certificate Lifecycle Management (CLM) Consultant - LATAM - **Company:** Entelligence LLC - **Location:** United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Active Directory, Active Directory Federation Services, Amazon Web Services, Apache HTTP Server, Microsoft Azure, Oracle WebLogic Server, Unix, Linux, Disaster Recovery, Hardware Security Module, Hyper-V, IBM Websphere Application Server, Internet Information Services (IIS), Python (Programming Language), Key Management, Lightweight Directory Access Protocols (LDAP), Microsoft SQL Server, Windows Servers, Public Key Infrastructure, X.509, Windows PowerShell, Systems Integration, Scripting, Transport Layer Security, Google Cloud, System Availability, Multi-Cloud, Kubernetes, Hashicorp, Restful APIs, Citrix Netscaler, Vmware - **Published:** September 11, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9154128/certificate-lifecycle-management-clm-consultant-latam ## About the Role * Excellent written and verbal communication skills. * Fluency in both English and Spanish, written and verbal, is required. * Minimum 5 years hands on experience with enterprise PKI and certificate lifecycle management as a primary focus, and 8+ years in enterprise IT. * Deep expertise in multi tier Certificate Authority architectures (offline root and issuing CAs), X.509, Registration Authorities, certificate revocation (CRL, OCSP), and Hardware Security Modules. * Strong knowledge of enterprise networking, Windows Server, and Linux and Unix environments. * Hands on experience integrating identity and security platforms with Active Directory, AD CS, ADFS, and LDAP. * Experience deploying and supporting enterprise security solutions across AWS, Microsoft Azure, and Google Cloud Platform, including certificate and key management services. * Understanding of high availability and disaster recovery architectures. * Proven experience delivering Professional Services engagements from solution design through implementation, testing, and knowledge transfer. * Ability to manage multiple customer engagements simultaneously while maintaining high standards of quality and customer satisfaction. PREFERRED: * Hands on implementation experience with a certificate lifecycle management platform such as Venafi, Keyfactor, AppViewX, or DigiCert ONE. * Certificate lifecycle automation (ACME, SCEP, EST) and scripting with PowerShell or Python, including REST API integration. * Experience with TLS and SSL enabled technologies such as F5, Citrix NetScaler, IIS, Apache HTTP Server, Oracle WebLogic, or IBM WebSphere. * Microsoft SQL Server administration; VMware or Hyper V; Kubernetes or cert manager; HashiCorp Vault. * Knowledge of enterprise IT operations and ITIL practices. * Industry recognized security certifications such as CISSP, GIAC, or equivalent. ## Description Entelligence is seeking a Certificate Lifecycle Management (CLM) Consultant to support external clients. The successful candidate must be able to work in a cross functional environment and interact with representatives from Entelligence and the end client. The Consultant will serve as a trusted technical advisor, interacting directly with the customer's personnel. The Consultant will lead customer engagements from solution architecture through deployment, integration, automation, and knowledge transfer, delivering secure, scalable Public Key Infrastructure (PKI) and certificate lifecycle management solutions across complex multi cloud, hybrid, and self hosted environments. The Consultant serves as the technical expert on project teams, provides technical direction and alternatives, and solves unusually complex technical problems with highly innovative solutions., * Work full time with the customer as the PKI and certificate lifecycle technical lead. * Design, implement, and optimize enterprise PKI, including multi tier Certificate Authority architectures, Registration Authorities, and Hardware Security Module (HSM) backed key protection. * Own end to end certificate lifecycle management: discovery, issuance, renewal, revocation, and compliance reporting. * Drive automation, visibility, and reporting to improve certificate traceability and reduce overall risk posture. * Integrate certificate services with Active Directory, AD CS, ADFS, and LDAP, and across cloud identity, certificate, and key management services. * Lead technical workshops, architecture sessions, and customer meetings with both technical and business stakeholders. * Develop high level designs, runbooks, and knowledge transfer materials, and ensure a smooth operational handoff. * Assess and remediate PKI designs to reduce security and operational risk, following modern cryptographic best practices. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [WeAreDevelopers LIVE - Node and Package Security](https://www.wearedevelopers.com/videos/2138-wearedevelopers-live-node-and-package-security) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [The Time Paradox: Building Timezone-Safe Python/Django Applications](https://www.wearedevelopers.com/videos/1915-the-time-paradox-building-timezone-safe-python-django-applications) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)