Remote CyberArk / Venafi /PKI Certificate Management Analyst

About the job

A leading organization is looking for a CyberArk / PKI & Certificate Management Engineer to join its growing cybersecurity and infrastructure team. This is a fully remote, full-time opportunity focused on Privileged Access Management (PAM), Public Key Infrastructure (PKI), and enterprise certificate lifecycle management. You'll work with technologies including CyberArk, PKI solutions, and Venafi to help secure privileged accounts, manage digital certificates, automate certificate lifecycles, and strengthen enterprise security across a complex IT environment.

Required Skills & Experience

• 3+ years of experience in cybersecurity, infrastructure engineering, identity management, or security engineering.
• Hands-on experience with CyberArk Privileged Access Management (PAM).
• Experience with Public Key Infrastructure (PKI), including certificate authorities, certificate issuance, renewal, and revocation.
• Experience with enterprise certificate lifecycle management.
• Hands-on experience with Venafi (now part of CyberArk) or similar certificate management platforms.
• Understanding of digital certificates, SSL/TLS, encryption, and cryptographic fundamentals.
• Experience managing certificate deployments across Windows, Linux, servers, and enterprise applications.
• Knowledge of Active Directory, authentication protocols, and enterprise security best practices.
• Strong troubleshooting and problem-solving skills.

Desired Skills & Experience

• CyberArk Defender, Sentry, or other relevant CyberArk certifications.
• Experience with Venafi Trust Protection Platform or Venafi TLS Protect.
• Experience with Microsoft Active Directory Certificate Services (AD CS).
• Knowledge of certificate automation, discovery, provisioning, renewal, and revocation.
• Experience with certificate management APIs and automation using PowerShell, Python, or REST APIs.
• Familiarity with HSMs (Hardware Security Modules), key management, and cryptographic standards.
• Experience supporting cloud environments such as AWS, Azure, or GCP.
• Knowledge of certificate-related compliance requirements and security frameworks.
• Experience integrating PKI and certificate management solutions with enterprise applications and infrastructure.

What You Will Be Doing Tech Breakdown

• 35% CyberArk / Privileged Access Management
• 35% PKI & Certificate Management
• 20% Venafi / Certificate Lifecycle Automation
• 10% Scripting, Automation & Security Integrations

Daily Responsibilities

• 50% Hands-On Engineering & Troubleshooting
• 30% Certificate Management & Security Administration
• 20% Team Collaboration & Project Work

The Offer

• Competitive base salary.
• Bonus eligible.
• 100% remote work environment.

You will receive the following benefits:

• Medical, Dental, and Vision Insurance.
• Vacation Time.
• Stock Options.

Applicants must be currently authorized to work in the US on a full-time basis now and in the future.