NTT DATA is seeking a Senior Venafi PKI Engineer to lead enterprise digital certificate management. This role focuses on administering, automating, and governing certificate lifecycles using the Venafi Platform. You will ensure a Zero-Touch PKI framework, handling automated discovery, issuance, renewal, and compliance across diverse environments.

This position requires deep expertise in Venafi TLS Protect, Enterprise PKI, AD CS, certificate automation, machine identity management, and security governance. Collaborating with Cybersecurity, Infrastructure, Cloud, DevOps, Application, and Network teams is crucial for securing machine identities and preventing certificate-related outages.

Key responsibilities include administering and maintaining the Venafi platform, managing TLS Protect and Trust Protection Platform, and ensuring platform availability. You will automate certificate lifecycle processes, including discovery, issuance, renewal, and revocation, across enterprise applications, servers, and cloud workloads. The role also involves managing enterprise PKI environments (AD CS, Public/Internal CAs, Cloud Services), integrating with various systems (ServiceNow, CyberArk, SIEM, DevOps), and developing automation scripts using PowerShell, Python, and REST APIs.

Additional duties encompass managing machine identities across Windows/Linux servers, cloud platforms, containers, and network devices. You will define and enforce certificate security policies, support audit and compliance requirements, and conduct risk assessments. Incident, Change, and Problem Management for certificate services are also key aspects, along with daily health checks, monitoring certificate expiry, and generating reports for leadership.

This role demands strong hands-on experience with Venafi TLS Protect/TPP and expertise in Zero-Touch Certificate Lifecycle Management. You must possess extensive experience in Enterprise PKI, Certificate Authorities, SSL/TLS Certificates, Machine Identity Management, Certificate Automation, and Active Directory Certificate Services (AD CS). Experience managing large-scale certificate environments with thousands of certificates is essential.

Proficiency in core infrastructure and security concepts like Microsoft Active Directory, Windows Server, DNS, Load Balancers (F5, Netscaler), Web Servers (IIS, Apache, NGINX), Cloud Platforms (Azure, AWS, GCP), and Kubernetes security is required. A solid understanding of cryptography, certificate trust chains, OCSP, CRL, and HSM concepts is also necessary. Automation skills including PowerShell, Python scripting, REST API integration, and familiarity with DevOps/CI/CD are critical. Experience with ITIL Service Management practices and ITSM processes (Incident, Change, Problem Management) is also needed.