About this role

Position: Venafi Engineer

Location: Chicago/Arizona

Rates: DOE

Key Responsibilities

Administer and support the Venafi Trust Protection Platform.
Manage the complete lifecycle of TLS/SSL certificates including discovery, enrollment, renewal, and revocation.
Monitor certificate expiration and resolve certificate-related issues.
Configure and maintain Venafi policies, zones, workflows, and permissions.
Perform certificate discovery across servers, applications, cloud environments, and network devices.
Integrate Venafi with Active Directory, CA/PKI, load balancers, web servers, and other enterprise systems.
Automate certificate provisioning and renewal using APIs, scripts, or automation tools.
Troubleshoot certificate, TLS/SSL, and Venafi integration issues.
Work with application, infrastructure, security, and network teams to onboard certificates into Venafi.
Maintain documentation, operational procedures, and certificate inventories.
Support security and compliance requirements related to machine identities and digital certificates.

Required Skills

Hands-on experience with Venafi Trust Protection Platform / Venafi TLS Protect.
Strong understanding of PKI, digital certificates, TLS/SSL, and certificate lifecycle management.
Experience with certificate authorities such as Microsoft AD CS or other enterprise CAs.
Knowledge of Windows and Linux/Unix environments.
Experience with web servers such as IIS, Apache, and NGINX.
Basic scripting knowledge in PowerShell, Python, or Shell scripting.
Understanding of REST APIs and system integrations.
Good troubleshooting and communication skills.

Preferred Skills

Venafi Engineer

Key skills