Certificate Lifecycle Management (CLM) Consultant

About the role

Certificate Lifecycle Management (CLM) Consultant – Entelligence is seeking a technical advisor to support external clients across LATAM, delivering secure, scalable PKI and certificate lifecycle solutions in multi‑cloud, hybrid and on‑prem environments.

Key responsibilities

• Work full‑time with customers as the PKI and certificate lifecycle technical lead.
• Design, implement and optimise enterprise PKI, including multi‑tier CA architectures, Registration Authorities and HSM‑backed key protection.
• Own end‑to‑end certificate lifecycle management: discovery, issuance, renewal, revocation and compliance reporting.
• Drive automation, visibility and reporting to improve certificate traceability and reduce risk.
• Integrate certificate services with Active Directory, AD CS, ADFS and LDAP, as well as cloud identity and key management services.
• Lead technical workshops, architecture sessions and customer meetings with both technical and business stakeholders.
• Develop high‑level designs, runbooks and knowledge‑transfer materials and ensure smooth operational hand‑off.
• Assess and remediate PKI designs to reduce security and operational risk following modern cryptographic best practices.

Required profile

• Excellent written and verbal communication skills.
• Fluency in English and Spanish (written and verbal).
• Minimum 5 years hands‑on experience with enterprise PKI and certificate lifecycle management, and 8 + years in enterprise IT.
• Proven experience delivering professional services engagements from design through implementation and knowledge transfer.
• Ability to manage multiple customer engagements simultaneously while maintaining high quality.

Required skills

• Enterprise PKI, multi‑tier Certificate Authority architectures, offline root and issuing CAs.
• X.509, Registration Authorities, CRL, OCSP.
• Hardware Security Modules (HSM).
• Active Directory, AD CS, ADFS, LDAP integration.
• Cloud platforms: AWS, Microsoft Azure, Google Cloud Platform.
• Automation and scripting: PowerShell, Python, REST API.
• Certificate lifecycle platforms: Venafi, Keyfactor, AppViewX, DigiCert ONE.
• TLS/SSL technologies: F5, Citrix NetScaler, IIS, Apache HTTP Server, Oracle WebLogic, IBM WebSphere.
• Microsoft SQL Server, VMware, Hyper‑V, Kubernetes, HashiCorp Vault.

What we offer

• Competitive base salary.
• Comprehensive benefits package aligned to your country of employment.
• Paid time off and holidays.