Lead Identity Engineer - PKI / Venafi

• Administer and support enterprise PKI environments, including Microsoft ADCS, Root & Issuing CAs, OCSP, CDP, NDES, certificate templates, and registration authorities.
• Manage the complete certificate lifecycle including issuance, renewal, revocation, replacement, monitoring, and compliance.
• Administer Venafi TLS Protect, Sectigo CLM, and AppViewX (preferred), driving certificate automation and reducing manual processes.
• Implement and support automated certificate management for short-lived certificates and enterprise-wide renewal programs.
• Configure Venafi policies, workflows, integrations, certificate discovery, inventory management, and compliance monitoring.
• Design and support code-signing, S/MIME, and cryptographic services, integrating with CI/CD and development platforms.
• Enable certificate automation across AWS, Kubernetes, cloud-native platforms, load balancers, application gateways, and hybrid cloud environments.
• Manage PKI infrastructure components including ADCS clusters, Entrust HSM, Venafi, Sectigo CLM, OCSP responders, NDES, and external CAs.
• Identify and remediate certificate-related risks, vulnerabilities, expired, self-signed, rogue, and non-compliant certificates.
• Provide L2/L3 support for PKI, TLS/SSL, trust-chain, certificate enrolment, renewal, platform integration, and ServiceNow workflow issues.
• Lead PKI transformation, certificate automation, and cloud security projects while partnering with infrastructure, security, DevOps, and application teams.
• Create and maintain architecture documents, SOPs, runbooks, DR procedures, and provide technical guidance and knowledge-transfer sessions.

• 5+ years of experience in PKI, Certificate Lifecycle Management, and Cryptography.
• Proven expertise in installing, configuring, and managing Microsoft Certificate Authorities (ADCS).
• Hands-on administration of Venafi and/or Sectigo CLM platforms.
• Experience delivering certificate automation, code-signing, cloud integration, and PKI transformation projects.
• Exposure to cloud, containerized, and hybrid infrastructure environments.
• Strong knowledge of PKI, X.509 Certificates, Digital Signatures, TLS/SSL, Symmetric & Asymmetric Encryption, CRL, OCSP, NDES, Certificate Templates, CA/RA, and HSM technologies.
• Hands-on experience with Microsoft ADCS, Venafi TLS Protect, Sectigo CLM, AppViewX (preferred), Entrust HSM, Code Signing, and S/MIME solutions.
• Strong administration skills on Windows and Linux servers.
• Experience with PowerShell scripting, REST APIs, automation frameworks, ServiceNow, AWS ACM, and Kubernetes certificate management.

• Venafi Certified Professional
• Microsoft Security / Windows Server Certifications
• CISSP, CISM, or CompTIA Security+

Simeio is an equal opportunity employer. If you require assistance with completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to any of the recruitment team at recruitment@simeio.com or +1 404-882-3700.