DevSecOps Engineering+Venafi SSH Key Management

SSH key lifecycle processes, Venafi Integration, Key Rotation, Venafi's SSH CA capabilities.

• Understanding of agent-based and agentless scanning tools to identify SSH keys across the infrastructure, including Windows, Unix/Linux, and services.
• Scripting skills: ability to customize Power Shell scripts for adaptable SSH key discovery, especially for agentless deployments.
• Cryptography fundamentals: basic understanding of public‑key cryptography and how SSH keys and certificates function.
• Automation: proficiency in automating SSH key lifecycle processes, including provisioning, rotation, remediation, and revocation.
• Integration knowledge: familiarity with integrating Venafi with other security tools such as Active Directory, Cyber Ark, Service Now, and similar systems.
• Problem‑solving: ability to troubleshoot issues related to SSH key discovery, deployment, and usage.
• Network understanding: knowledge of network protocols and device configurations to effectively scan and locate SSH keys.
• Key rotation: implementing automated key rotation policies and best practices for rotating user keys.
• Key inventory management: creating and maintaining an accurate, up‑to‑date inventory of all SSH keys, including type, location, component, algorithm, and key sizes.
• Certificate management: understanding SSH certificates as an alternative or supplement to SSH keys, including benefits such as expiration dates and metadata, and managing them through Venafi's SSH CA capabilities.
• Risk assessment and prioritization: identifying vulnerabilities (e.g., weak keys, old or duplicate keys, orphan keys, root access) and prioritizing remediation based on criticality.
• Access control: understanding role‑based access control and managing permissions for SSH key usage and issuance.
• Auditing and reporting: generating reports on SSH key inventory, policy violations, usage patterns, and compliance status to support audits.

• API Development, Cloud Transformation, Dev Sec Ops  engineering using automated secure CI/CD toolchain.
• Extensive Java J2EE experience.
• Workforce Identity Access Management development and maintenance; identity access lifecycle management administration and automation.
• Access control and authorization engineering, identity federation, application integration, and privileged access management using zero‑trust modern identity initiatives (MFA, SSO, RBAC, passwordless, device trust, SSPR).
• Security (protect identities), engineering (build scalable systems), operations (run critical infrastructure), compliance (prove control effectiveness).

• API Development
• CICD Pipeline
• Java
• Docker
• Git
• Ansible

• VSCODE
• Intellij
• Git
• Azure

Experience

Required:

8-10