> Markdown version of [/jobs/ext/2915878-pki-venafi-architect](https://www.wearedevelopers.com/jobs/ext/2915878-pki-venafi-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # PKI Venafi Architect - **Company:** Ztek Consulting - **Location:** Chicago, IL, United States - **Experience:** Expert - **Salary:** $115,000.0 - $140,000.0 - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Amazon Web Services, Apache HTTP Server, Apache Tomcat, Computing Platforms, Microsoft Azure, Oracle WebLogic Server, Cyber Security, Computer Programming, Linux, DevOps, Digital Signature, Electronic Design Automation, Github, Internet Information Services (IIS), Python (Programming Language), Key Management, Windows Servers, PCI Data Security Standards, Public Key Infrastructure, X.509, Windows PowerShell, Cloud Services, Ansible, Zero Trust Network Access, Scripting, Transport Layer Security, Enterprise Software Applications, Load Balancing, Pingfederate, Kubernetes, Information Technology, Hashicorp, Apache Kafka, Cloud Integration, Restful APIs - **Published:** September 15, 2026 - **Apply:** https://www.dice.com/job-detail/635cdf7b-aefa-4f9a-ba4c-1a226287b045 ## About the Role * Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related discipline. * 10+ years of Information Security experience. * 5+ years of hands-on PKI architecture experience. * 5+ years of Venafi Trust Protection Platform experience. * Strong expertise in: o X.509 Certificates o TLS/SSL o PKI o CLM o CRL/OCSP o HSM Technologies o Digital Signatures o Cryptographic Key Management * Experience designing PKI solutions in Azure and AWS environments. * Strong scripting skills using PowerShell and Python. Preferred Qualifications * CISSP, CISM, CCSP, or equivalent certification. * Venafi Certified Professional/Architect certification. * Experience with: o Keyfactor o DigiCert o Entrust o Microsoft ADCS o HashiCorp Vault o Azure Key Vault o AWS Certificate Manager * Experience operating in BFSI or other highly regulated environments. Technical Skills PKI & Cryptography * PKI Architecture * X.509 Certificates * TLS/SSL * PKCS Standards * Digital Signatures * HSM Integration * CRL / OCSP Venafi * Venafi TPP * Venafi TLS Protect * Certificate Discovery * Policy Management ## Description * Design and maintain enterprise PKI architecture, including Root CA, Issuing CA, CRL, OCSP, HSM, and trust frameworks. * Develop certificate governance standards, policies, and cryptographic control frameworks. * Architect highly available and resilient PKI and CLM platforms. * Drive enterprise machine identity and certificate management strategy. Venafi Platform Architecture * Design and administer Venafi Trust Protection Platform (TPP). Must Have Technical/Functional Skills PKI & Security Architecture * Design and maintain enterprise PKI architecture, including Root CA, Issuing CA, CRL, OCSP, HSM, and trust frameworks. * Develop certificate governance standards, policies, and cryptographic control frameworks. * Architect highly available and resilient PKI and CLM platforms. * Drive enterprise machine identity and certificate management strategy. Venafi Platform Architecture * Design and administer Venafi Trust Protection Platform (TPP). * Define onboarding standards, workflows, policies, reporting, discovery jobs, and access models. * Architect integrations between Venafi and enterprise applications, cloud services, and security platforms. * Lead Venafi platform upgrades, enhancements, and optimization initiatives. Roles & Responsibilities Certificate Lifecycle Automation * Architect automated certificate provisioning and renewal solutions. * Design automation frameworks using: o Venafi APIs o vCert o PowerShell o Python o Ansible o GitHub Actions o Azure DevOps o CI/CD pipelines * Drive adoption of certificate automation across enterprise application portfolios. Application & Cloud Integration * Lead application onboarding into CLM services. * Support certificate deployment and automation across: o Windows Server o Linux/Unix o IIS o Apache o Tomcat o WebLogic o Kubernetes o Azure o AWS o F5 Load Balancers o Kafka o Solace o PingFederate * Provide architecture guidance and troubleshooting support for complex trust and certificate-related issues. Governance & Compliance * Ensure compliance with NIST, PCI-DSS, SOX, ISO 27001, FedRAMP, and enterprise security standards. * Conduct cryptographic risk assessments and certificate posture reviews. * Define certificate ownership models and governance processes. * Support audits and regulatory compliance activities, * Reporting & Governance Cloud & DevOps * Azure * AWS * Kubernetes * GitHub Actions * Azure DevOps * CI/CD Pipelines * Infrastructure as Code Programming & Automation * PowerShell Python * REST APIs * Ansible Leadership Expectations * Serve as the PKI and Machine Identity SME. * Provide technical leadership to engineering and operations teams. * Develop enterprise PKI roadmaps and modernization strategies. * Mentor engineers and establish best practices for certificate lifecycle management. * Drive Zero Trust and identity-centric security initiatives. ## Related Videos - [Inside Bitpanda's Tech Stack: Scaling a European Fintech Leader - Markus Dorner](https://www.wearedevelopers.com/videos/1979-inside-bitpanda-s-tech-stack-scaling-a-european-fintech-leader-markus-dorner) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Bringing AI Model Testing and Prompt Management to Your Codebase with GitHub Models](https://www.wearedevelopers.com/videos/1536-bringing-ai-model-testing-and-prompt-management-to-your-codebase-with-github-models) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [Trustworthy AI Starts at Deployment: 5 Checks Before You Ship](https://www.wearedevelopers.com/magazine/753-trustworthy-ai-starts-at-deployment-5-checks-before-you-ship) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)