• Certificate Management Services Engineer (PKI…

    Insight Global (Chicago, IL)


    Job Description

    Insight Global is seeking a Certificate Management Services Engineer to join the Enterprise PKI and Crypto Technologies team at major financial institution. This role is critical for managing and automating digital certificate lifecycle processes using Venafi Trust Protection Platform (TPP). The ideal candidate will have deep expertise in PKI, certificate management, and automation, ensuring secure machine identities across enterprise systems. This role is 5 days a week on-site in Chicago, IL or Denver, CO.

    Key Responsibilities

    • Administer and maintain Venafi TPP backend processes for certificate provisioning, renewal, and revocation.

    • Apply Venafi patches, upgrade environments, and fully test processes with little guidance.

    • Design and implement automated certificate workflows leveraging Venafi APIs.

    • Manage enterprise PKI infrastructure, including SSL/TLS and related security protocols.

    • Develop automation scripts using PowerShell or C# to streamline certificate operations and Venafi backend processes.

    • Ensure compliance with security standards and best practices.

    • Collaborate with DevOps, IAM, and application teams for secure integrations.

    • Provide technical support and troubleshooting for PKI-related issues.

     

    We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [email protected] learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

    Skills and Requirements

    • 5+ years of experience in PKI engineering and certificate lifecycle management.

    • Hands-on experience with administering Venafi Trust Protection Platform and TLS Protect services.

    • Strong knowledge of Windows Server, Linux (RHEL), IIS, and networking protocols (TCP/IP, DNS, HTTP, SSH).

    • Strong trouble shooting knowledge on Windows.

    • Understanding of encryption standards and Hardware Security Modules (HSMs). • Familiarity with cloud PKI solutions (AWS, Azure, GCP).

    • Certifications in PKI, Venafi, or related security technologies.

    • Experience in Agile environments and DevOps practices.

    • Bachelor’s degree in Computer Science, Information Security, or related field.

    • Proficiency in scripting languages (PowerShell preferred).

    • Experience with Venafi API integrations and automation solutions.