SC Cleared Venafi Engineer - PKI/Certificate Management
- Discuss this with your agent
- Open in Claude
- Open in ChatGPT
Prepare application
- Draft this with your agent
- Open in Claude
- Open in ChatGPT
Role details
Tech stack
Job description
We are seeking an experienced SC Cleared Venafi/Digital Identity Engineer to join a global IT consultancy supporting a major UK organisation on a security and identity transformation programme.
This is a hands-on technical role focused on Venafi configuration, PKI and certificate lifecycle management, supporting the implementation of secure certificate onboarding, governance, automation and operational readiness.
Working closely with Identity Architects, Business Analysts and operational teams, you will help establish and improve enterprise certificate management processes., * Configure and manage Venafi Trust Protection Platform (TPP)/Venafi Control Plane.
- Support certificate discovery, onboarding, enrolment, renewal, revocation and lifecycle management.
- Implement technical configuration changes and integrate certificate management across applications, networks and cloud environments.
- Produce technical designs, CAB submissions and implementation documentation.
- Develop certificate inventory, ownership, compliance and reporting dashboards.
- Support audit requirements, operational readiness reviews (ORR) and handover to support teams.
- Identify opportunities for certificate automation and process improvements.
Requirements
- 3-5+ yearsβ experience in PKI and certificate lifecycle management.
- Strong hands-on experience with Venafi TPP or Venafi Control Plane.
- Knowledge of public/private PKI, TLS/SSL certificates, certificate authorities, keystores and HSMs.
- Experience with certificate discovery, onboarding, renewal, revocation and policy management.
- Experience integrating certificate management with enterprise infrastructure, cloud and applications.
- Strong technical documentation, change management and operational support experience.
- Active SC Clearance is mandatory.
Desirable:
- PowerShell, Python, REST APIs or certificate automation experience.
- Broader Identity & Access Management experience, including CyberArk or other PAM/IGA technologies.
- Experience supporting regulated or security-critical enterprise environments.
Apply for this position
This job is hosted externally. Click below to view the full posting and apply.
Prepare application
- Draft this with your agent
- Open in Claude
- Open in ChatGPT
Good distractions
Loading talks and stories from around this roleβ¦