PKI Architect
Core
Lead enterprise certificate modernization by designing PKI architecture, operating AppViewX, and automating the certificate lifecycle to reduce expiry risk.
Role type
Senior PKI Architect and Certificate Lifecycle Management (CLM) Platform Engineer
Builds
Enterprise certificate inventory, automated issuance/renewal/revocation workflows, and integrated PKI services for public TLS and internal machine identities.
Domain
Cybersecurity, PKI, Certificate Authority (CA) management, and Infrastructure Security.
Required skills
X509 PKI architecture, AppViewX administration, ServiceNow ITSM integration, Python/PowerShell/Bash automation, cryptographic policy design, Kubernetes/OpenShift certificate management, Microsoft ADCS, cloud CA integration.
Preferred skills
Venafi, Keyfactor, DigiCert, Sectigo experience, ACME protocol, OAuth 2.0, SIEM integration, hybrid infrastructure (Windows/Linux/F5).
Technologies
AppViewX, ServiceNow, Microsoft ADCS, DigiCert, Venafi, Keyfactor, Sectigo, Kubernetes, OpenShift, certmanager, Vault, PowerShell, Python, Bash, REST APIs.
Responsibilities
Design target-state PKI architecture and reference patterns for certificate discovery and lifecycle; Administer AppViewX platform including RBAC, discovery, and renewal workflows; Integrate CLM with ServiceNow and CAs using secure automation; Enforce cryptographic standards and security governance; Troubleshoot incidents and maintain audit evidence.
Seniority
Senior, hands-on IC with delivery leadership
