Venafi Engineer (PKI Specialist)

Innova Solutions•Chicago, IL

16h•Onsite

About The Position

A client of Innova Solutions is immediately hiring for a Venafi Engineer (PKI Specialist). This is a contract position with a duration of 12 to 18 months. The role requires 5 days onsite in Chicago, IL, Denver, CO, or Washington, DC. As a Venafi Engineer (PKI Specialist), you will administer and maintain Venafi TPP processes for certificate provisioning, renewal, and revocation. You will develop automation solutions using PowerShell or C# to streamline certificate and Venafi backend operations. This includes applying Venafi patches and upgrades, testing, and documentation with minimal guidance. You will also design and implement automated certificate workflows using Venafi APIs, ensure compliance with security standards and best practices, and collaborate with DevOps, IAM, Engineering, Deployment, and Operations teams to support secure integrations and drive design adoption. Troubleshooting issues in Windows Server 2022 and RHEL/Unix environments is also a key part of the role, as is making engineering decisions and implementing technical automation solutions. The ideal candidate will operate independently and take initiative in a structured environment.

Requirements

5+ years of experience in PKI engineering and certificate lifecycle management.
Strong knowledge of encryption technologies (symmetric/asymmetric cryptography, digital signatures, certificate authorities).
Proficiency in automation scripting (PowerShell or C#) and clear communication of technical solutions.
Hands-on experience with CI/CD pipelines.
Familiarity with code signing and securing cloud-based applications.
Extensive experience with PKI, TLS certificate management, and SDLC practices.
Hands-on experience with Venafi TPP, TLS Protect, or similar certificate management platforms.
Strong understanding of Windows Server, RHEL/Linux, IIS, and networking protocols (TCP/IP, DNS, HTTP, SSH).
Strong troubleshooting skills on Windows platforms.
Experience integrating and automating with Venafi APIs.
Excellent analytical, organizational, verbal, and written communication skills.
Ability to manage multiple priorities in fast-paced environments.
Adaptability to changing requirements and ambiguity.
Ability to influence and align teams to a technical vision.
Selfstarter with strong motivation and curiosity; able to work with minimal guidance.

Nice To Haves

Familiarity with cloud PKI offerings (AWS, Azure, GCP).
Certifications in PKI, Venafi, or related security technologies.
Experience in Agile and DevOps environments.
Experience troubleshooting certificate provisioning issues and managing Venafi configurations.
Ability to create/update Ansible Tower/AAP/OpenSource playbooks.
Familiarity with deploying containerized applications.
Bachelor’s degree in computer science, Information Security, or a related field.

Responsibilities

Administer and maintain Venafi TPP processes for certificate provisioning, renewal, and revocation.
Develop automation solutions using PowerShell or C# to streamline certificate and Venafi backend operations.
Apply Venafi patches and upgrades, including testing and documentation with minimal guidance.
Design and implement automated certificate workflows using Venafi APIs.
Ensure compliance with security standards and best practices.
Collaborate with DevOps, IAM, Engineering, Deployment, and Operations teams to support secure integrations and drive design adoption.
Troubleshoot issues in Windows Server 2022 and RHEL/Unix environments.
Make engineering decisions and implement technical automation solutions.
Operate independently and take initiative in a structured environment.