The Role
Administer and optimize enterprise PKI and certificate lifecycle platforms, including Microsoft ADCS and Venafi. Manage certificate issuance, renewal, revocation, deployment, templates, expiration monitoring, troubleshooting, and audit remediation across Windows, Linux, and application environments. Support HSM-integrated cryptographic infrastructure, ServiceNow workflows, S/MIME, and code-signing certificates. Collaborate with technical teams and vendors, automate processes, document procedures, and participate in incident, problem, and change management.
Summary Generated by Built In
About the Role:
We are seeking a highly motivated and self-driven PKI/Venafi Engineer with strong experience in Public Key Infrastructure (PKI), Certificate Lifecycle Management (CLM), and cryptographic security solutions. The candidate will be responsible for managing enterprise PKI platforms, automating certificate lifecycle processes, supporting code-signing solutions, and driving strategic PKI modernization initiatives across on-premises and cloud environments.
The role requires hands-on expertise in Microsoft ADCS, Venafi, Sectigo CLM, cloud-native certificate management, and associated cryptographic technologies. The individual should be capable of independently driving projects end-to-end with minimal supervision while collaborating effectively with technical and business stakeholders.
What You'll Do:
- Administer and support enterprise PKI environments, including Microsoft ADCS, Root & Issuing CAs, OCSP, CDP, NDES, certificate templates, and registration authorities.
- Manage the complete certificate lifecycle including issuance, renewal, revocation, replacement, monitoring, and compliance.
- Administer Venafi TLS Protect, Sectigo CLM, and AppViewX (preferred), driving certificate automation and reducing manual processes.
- Implement and support automated certificate management for short-lived certificates and enterprise-wide renewal programs.
- Configure Venafi policies, workflows, integrations, certificate discovery, inventory management, and compliance monitoring.
- Design and support code-signing, S/MIME, and cryptographic services, integrating with CI/CD and development platforms.
- Enable certificate automation across AWS, Kubernetes, cloud-native platforms, load balancers, application gateways, and hybrid cloud environments.
- Manage PKI infrastructure components including ADCS clusters, Entrust HSM, Venafi, Sectigo CLM, OCSP responders, NDES, and external CAs.
- Identify and remediate certificate-related risks, vulnerabilities, expired, self-signed, rogue, and non-compliant certificates.
- Provide L2/L3 support for PKI, TLS/SSL, trust-chain, certificate enrolment, renewal, platform integration, and ServiceNow workflow issues.
- Lead PKI transformation, certificate automation, and cloud security projects while partnering with infrastructure, security, DevOps, and application teams.
- Create and maintain architecture documents, SOPs, runbooks, DR procedures, and provide technical guidance and knowledge-transfer sessions.
- 5+ years of experience in PKI, Certificate Lifecycle Management, and Cryptography.
- Proven expertise in installing, configuring, and managing Microsoft Certificate Authorities (ADCS).
- Hands-on administration of Venafi and/or Sectigo CLM platforms.
- Experience delivering certificate automation, code-signing, cloud integration, and PKI transformation projects.
- Exposure to cloud, containerized, and hybrid infrastructure environments.
- Strong knowledge of PKI, X.509 Certificates, Digital Signatures, TLS/SSL, Symmetric & Asymmetric Encryption, CRL, OCSP, NDES, Certificate Templates, CA/RA, and HSM technologies.
- Hands-on experience with Microsoft ADCS, Venafi TLS Protect, Sectigo CLM, AppViewX (preferred), Entrust HSM, Code Signing, and S/MIME solutions.
- Strong administration skills on Windows and Linux servers.
- Experience with PowerShell scripting, REST APIs, automation frameworks, ServiceNow, AWS ACM, and Kubernetes certificate management.
Preferred Certifications
- Venafi Certified Professional
- Microsoft Security / Windows Server Certifications
- CISSP, CISM, or CompTIA Security+
About Simeio and What We Do
Simeio has over 650 talented employees across the globe. We have offices in USA (Atlanta HQ and Texas), India, Canada, Costa Rica and UK.
Founded in 2007, and now backed by private equity company ZMC, Simeio is recognized as a top IAM provider by industry analysts.
Alongside Simeio’s identity orchestration tool ‘Simeio IO’ - Simeio also partners with industry leading IAM software vendors to provide access management, identity governance and administration, privileged access management and risk intelligence services across on-premise, cloud, and hybrid technology environments.
Simeio provides services to numerous Fortune 1000 companies across all industries including financial services, technology, healthcare, media, retail, public sector, utilities and education.
Diversity & Inclusion
Simeio is an equal opportunity employer. If you require assistance with completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to our recruitment team - [email protected].
About Your Application
We carefully review every application we receive. If your skills and experience match our needs, we’ll be in touch. If you don’t hear from us within 10 days, please don’t be discouraged. We may retain your application for future opportunities. We also encourage you to check our careers page for other openings.
Skills Required
- 4-7 years of experience supporting Public Key Infrastructure environments
- Understanding of PKI concepts, digital certificates, digital signatures, certification authorities, CRLs, OCSP, NDES, certificate templates, and encryption technologies
- Hands-on experience with Microsoft Active Directory Certificate Services
- Experience administering certificate lifecycle management platforms such as Venafi and/or AppViewX
- Prior L1/L2 operational support experience in PKI and certificate management environments
- Understanding of certificate lifecycle processes including issuance, renewal, revocation, expiration management, and deployment
- Experience troubleshooting certificate installation and configuration issues across enterprise applications and servers
- Hands-on experience with Windows and Linux server certificate configuration, deployment, and troubleshooting
- Experience supporting enterprise cryptographic products and solutions
- Familiarity with ServiceNow workflows and IT service management processes
- Understanding of PKI auditing, risk assessment, security controls, and compliance requirements
- Strong analytical, troubleshooting, and problem-solving skills
- Excellent verbal and written communication skills with technical and non-technical stakeholders
- Experience with Entrust HSM administration and support
- Experience managing ADCS PKI clusters
- Knowledge of S/MIME implementation and support
- Experience with code-signing certificate management
- Familiarity with external Certificate Authorities such as Entrust and Sectigo
- Exposure to PKI automation and scripting using PowerShell
- Relevant security, PKI, or Microsoft certifications
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Customers of all sizes globally rely on Simeio to help secure their organizations. An innovative and industry leader, Simeio offers professional services, Identity and Access Management (IAM) managed services and Identity as a Service (IDaaS). Its full range of services is powered by an industry-first IAM Virtualization Platform delivered via Simeio's Identity SOC. Simeio's Identity SOC is the first and only solution of its kind designed specifically to operate, monitor, and defend complex multi-vendor IAM infrastructures and deliver actionable business intelligence. Simeio's client base is expanding as interest in identity and access management and IT governance, risk and compliance grows across all sectors. Headquartered in Atlanta, Georgia, Simeio has operations in India, the United Kingdom, Europe, across North America, South America and Canada. We are a cutting-edge growing company with a strong dedication to our employees and their opportunity for growth and success. Simeio offers a state-of-the-art technology office with plans for continued growth and expansion. Our company culture is crucial to those driven for success with an entrepreneurial spirit, solution oriented, and individual contributors, as well as, team players.
