PAID PRE-SALES ENGAGEMENT AppViewX Subject Matter Expert CLM | PKI | Machine Identity AutomationContract • Remote • 20 Hours Maximum • 5–6 Weeks Engagement Overview We are an IT professional services firm engaged in an active pre-sales pursuit requiring specialized AppViewX expertise. We are seeking an experienced AppViewX practitioner to serve as a paid subject matter expert (SME) to support scoping, solution design, and client-facing advisory activities throughout the engagement. This is a structured, time-boxed consulting engagement — not a full-time role. The right candidate will hit the ground running with deep hands-on AppViewX knowledge and the ability to operate comfortably in a pre-sales, client-facing environment. Should the end customer decide to implement AppViewX it could turn into a long term contract engagement. Engagement Terms - Engagement Type: Paid consulting contract - Total Hours: Hard maximum of 20 hours across the full engagement - Duration: 5 to 6 weeks from engagement start - Work Model: Remote - Hours Breakdown: Flexible and milestone-driven; distributed across discovery, design, and client sessions as scoped - Compensation: Competitive hourly rate commensurate with experience What You Will Do Working alongside our senior practice leadership and delivery architects, the AppViewX SME will be responsible for the following activities within the 20-hour engagement window: Pre-Sales & Solution Scoping - Participate in client discovery sessions to assess the current-state PKI and certificate management environment - Identify certificate types in scope: TLS/SSL, client authentication, code signing, IoT, SSH keys, and internal/private CA-issued certificates - Evaluate existing CA infrastructure (Microsoft ADCS, DigiCert, Entrust, Sectigo, public CAs) and readiness for AppViewX integration - Assess deployment environment: on-premises, private cloud, SaaS, hybrid multi-cloud, Kubernetes/container workloads, and edge - Define scope of certificate inventory sprawl and estimate Smart Discovery complexity Technical Advisory & Design - Recommend the appropriate AVX ONE modules given the client's environment and use cases (CLM, PKIaaS, KUBE+, Code Signing, SSH, ADC, Quantum Trust Hub) - Advise on deployment architecture and phasing: Discovery (weeks 1–2), Automation Deployment (weeks 3–4), and Enterprise Scale roadmap - Guide integration requirements across ITSM (ServiceNow, BMC Remedy), PAM, SIEM, HSM, DevOps toolchains, and CA connectors - Assess 47-day TLS mandate readiness and advise on ACME protocol automation requirements - Advise on post-quantum cryptography (PQC) readiness posture and Quantum Trust Hub applicability - Identify Microsoft PKI modernization opportunities and PKIaaS migration pathways Client-Facing Support - Support scoping calls and technical deep-dive sessions with the client's PKI, SecOps, NetOps, and DevOps stakeholders - Assist in developing scope narratives, technical assumptions, and risk/dependency documentation for inclusion in SOW - Provide input on level-of-effort estimates and implementation phasing recommendations - Serve as a technical credibility resource during client-facing presentations or demos Required Experience & Qualifications AppViewX Platform — Non-Negotiable - Minimum 2 years of hands-on AppViewX deployment, implementation, or pre-sales engineering experience - Direct experience with AVX ONE CLM: certificate discovery (Smart Discovery), lifecycle automation workflows, endpoint binding, renewal, and revocation - Practical experience with at least two AVX ONE deployment models: SaaS, on-premises, or private cloud - Working knowledge of the AVX ONE Policy Engine, Crypto Resilience Scorecards, and executive dashboards - Experience configuring CA integrations within AppViewX (public trust and/or private trust CAs) PKI & Certificate Management Expertise - Strong foundational knowledge of X.509 certificate architecture, TLS/SSL, PKI hierarchy design, and CA operations - Familiarity with certificate types: TLS, mTLS, client authentication, code signing, IoT/device certificates, SSH keys - Experience with Microsoft ADCS and/or enterprise CA platforms; familiarity with PKIaaS migration scenarios - Understanding of FIPS 140-2, HSM integration, and OCSP for enterprise PKI governance Integration & Technical Environment - Experience integrating AppViewX with one or more of: ServiceNow, F5 BIG-IP, HashiCorp Vault, Ansible, Terraform, Jenkins, Kubernetes (EKS/AKS/GKE), Citrix, Palo Alto, Infoblox - Familiarity with Kubernetes certificate management patterns (cert-manager, service mesh, ingress TLS) - Comfort operating in hybrid and multi-cloud enterprise environments (AWS, Azure, GCP) Pre-Sales & Consulting Skills - Demonstrated experience operating in a pre-sales, solution engineering, or consulting capacity - Ability to translate technical environment complexity into clear scoping assumptions and effort narratives - Strong written and verbal communication skills; comfortable in client-facing technical discussions - Ability to work independently, manage time within a hard-capped 20-hour budget, and deliver focused, high-quality outputs Preferred Qualifications - Prior experience at or working alongside an AppViewX channel partner, VAR, or systems integrator - Familiarity with the AppViewXpert partner program - Exposure to Post-Quantum Cryptography (PQC) migration planning and NIST PQC algorithm standards (ML-KEM, ML-DSA) - Experience with the CAB Forum's 47-day TLS validity mandate and ACME protocol automation - Knowledge of competing CLM platforms (Venafi, Keyfactor, DigiCert TLM) is a plus for competitive context - Experience supporting engagements in regulated industries: financial services, healthcare, defense, utilities Important Notes This engagement is strictly scoped to a hard maximum of 20 hours distributed across 5 to 6 weeks. It is designed for an experienced practitioner who can operate with minimal ramp-up and deliver expert-level input efficiently. Candidates who require significant onboarding time or who are unfamiliar with the AppViewX platform will not be a fit for this engagement. Compensation will be structured as an hourly consulting rate agreed upon prior to engagement start. A brief NDA and consulting agreement will be required before any client-sensitive materials are shared.