Certificate Lifecycle Management (CLM) Consultant – LATAM

About the role

Entelligence is seeking a Certificate Lifecycle Management (CLM) Consultant to support external clients across Latin America. The consultant will act as a trusted technical advisor, leading engagements from solution architecture through deployment, integration, automation and knowledge transfer.

Key responsibilities

• Serve as the PKI and certificate lifecycle technical lead for customers, designing and optimizing enterprise PKI architectures.
• Own end‑to‑end certificate lifecycle management including discovery, issuance, renewal, revocation and compliance reporting.
• Drive automation, visibility and reporting to improve traceability and reduce risk.
• Integrate certificate services with Active Directory, AD CS, ADFS, LDAP and cloud identity/key management platforms.
• Lead technical workshops, architecture sessions and customer meetings with both technical and business stakeholders.
• Develop high‑level designs, runbooks and knowledge‑transfer materials and ensure smooth operational hand‑off.

Required profile

• Excellent written and verbal communication skills in English and Spanish.
• Minimum 5 years hands‑on experience with enterprise PKI and certificate lifecycle management and 8+ years in enterprise IT.
• Deep expertise in multi‑tier Certificate Authority architectures, X.509, Registration Authorities, CRL/OCSP and Hardware Security Modules.
• Strong knowledge of Windows Server, Linux/Unix, networking and identity integration (AD, AD CS, ADFS, LDAP).
• Experience deploying security solutions on AWS, Azure and Google Cloud Platform.
• Proven ability to deliver professional services engagements from design through implementation and knowledge transfer.

Required skills

• PKI design and implementation
• Certificate Authority (offline root, issuing CAs)
• Hardware Security Modules (HSM)
• Active Directory, AD CS, ADFS, LDAP integration
• AWS, Microsoft Azure, Google Cloud Platform
• Automation protocols (ACME, SCEP, EST)
• Scripting with PowerShell and Python, REST API integration
• Certificate lifecycle platforms (Venafi, Keyfactor, AppViewX, DigiCert ONE)
• TLS/SSL technologies (F5, Citrix NetScaler, IIS, Apache, Oracle WebLogic, IBM WebSphere)
• Microsoft SQL Server, VMware, Hyper‑V, Kubernetes, cert‑manager, HashiCorp Vault

What we offer

• Competitive base salary
• Comprehensive benefits package aligned to your country of employment
• Paid time off and holidays