Lead Identity Engineer - PKI, Venafi

About the Role:
We are seeking a highly motivated and self-driven PKI/Venafi Engineer with strong experience in Public Key Infrastructure (PKI), Certificate Lifecycle Management (CLM), and cryptographic security solutions. The candidate will be responsible for managing enterprise PKI platforms, automating certificate lifecycle processes, supporting code-signing solutions, and driving strategic PKI modernization initiatives across on-premises and cloud environments.
The role requires hands-on expertise in Microsoft ADCS, Venafi, Sectigo CLM, cloud-native certificate management, and associated cryptographic technologies. The individual should be capable of independently driving projects end-to-end with minimal supervision while collaborating effectively with technical and business stakeholders.

What You'll Do:

• Administer and support enterprise PKI environments, including Microsoft ADCS, Root & Issuing CAs, OCSP, CDP, NDES, certificate templates, and registration authorities.
• Manage the complete certificate lifecycle including issuance, renewal, revocation, replacement, monitoring, and compliance.
• Administer Venafi TLS Protect, Sectigo CLM, and AppViewX (preferred), driving certificate automation and reducing manual processes.
• Implement and support automated certificate management for short-lived certificates and enterprise-wide renewal programs.
• Configure Venafi policies, workflows, integrations, certificate discovery, inventory management, and compliance monitoring.
• Design and support code-signing, S/MIME, and cryptographic services, integrating with CI/CD and development platforms.
• Enable certificate automation across AWS, Kubernetes, cloud-native platforms, load balancers, application gateways, and hybrid cloud environments.
• Manage PKI infrastructure components including ADCS clusters, Entrust HSM, Venafi, Sectigo CLM, OCSP responders, NDES, and external CAs.
• Identify and remediate certificate-related risks, vulnerabilities, expired, self-signed, rogue, and non-compliant certificates.
• Provide L2/L3 support for PKI, TLS/SSL, trust-chain, certificate enrolment, renewal, platform integration, and ServiceNow workflow issues.
• Lead PKI transformation, certificate automation, and cloud security projects while partnering with infrastructure, security, DevOps, and application teams.
• Create and maintain architecture documents, SOPs, runbooks, DR procedures, and provide technical guidance and knowledge-transfer sessions.

What You Bring:

• 5+ years of experience in PKI, Certificate Lifecycle Management, and Cryptography.
• Proven expertise in installing, configuring, and managing Microsoft Certificate Authorities (ADCS).
• Hands-on administration of Venafi and/or Sectigo CLM platforms.
• Experience delivering certificate automation, code-signing, cloud integration, and PKI transformation projects.
• Exposure to cloud, containerized, and hybrid infrastructure environments.
• Strong knowledge of PKI, X.509 Certificates, Digital Signatures, TLS/SSL, Symmetric & Asymmetric Encryption, CRL, OCSP, NDES, Certificate Templates, CA/RA, and HSM technologies.
• Hands-on experience with Microsoft ADCS, Venafi TLS Protect, Sectigo CLM, AppViewX (preferred), Entrust HSM, Code Signing, and S/MIME solutions.
• Strong administration skills on Windows and Linux servers.
• Experience with PowerShell scripting, REST APIs, automation frameworks, ServiceNow, AWS ACM, and Kubernetes certificate management.

Preferred Certifications

• Venafi Certified Professional
• Microsoft Security / Windows Server Certifications
• CISSP, CISM, or CompTIA Security+

About Simeio and What We Do
Simeio has over 650 talented employees across the globe. We have offices in USA (Atlanta HQ and Texas), India, Canada, Costa Rica and UK.
Founded in 2007, and now backed by private equity company ZMC, Simeio is recognized as a top IAM provider by industry analysts.
Alongside Simeio’s identity orchestration tool ‘Simeio IO’ - Simeio also partners with industry leading IAM software vendors to provide access management, identity governance and administration, privileged access management and risk intelligence services across on-premise, cloud, and hybrid technology environments.
Simeio provides services to numerous Fortune 1000 companies across all industries including financial services, technology, healthcare, media, retail, public sector, utilities and education.

Diversity & Inclusion
Simeio is an equal opportunity employer. If you require assistance with completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to our recruitment team - [email protected].

About Your Application
We carefully review every application we receive. If your skills and experience match our needs, we’ll be in touch. If you don’t hear from us within 10 days, please don’t be discouraged. We may retain your application for future opportunities. We also encourage you to check our careers page for other openings.
 

Simeio is an equal opportunity employer. If you require assistance with completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to any of the recruitment team at [email protected] or +1 404-882-3700.