Job Description

Role Purpose

The purpose of this role is to analyse, identify, rectify & recommend specific improvement measures that help in the security posture of the organization by protecting the sensitive information
 

͏

Responsibilities:

• Design, deploy, and maintain enterprise-level Public Key Infrastructure (PKI) systems in cloud or on-prem environments.

• Manage digital certificates and key lifecycles across a variety of systems and platforms ensuring timely issuance, renewal, revocation, and compliance

• Enforce certificate policies, practices, and standards across the organization.

• Monitor and troubleshoot PKI-related issues, including certificate expiration, revocation, and trust chain validation.

• Automate certificate management processes to ensure scalability and reduce human error.

• Collaborate with internal teams to ensure PKI integration with applications and network infrastructure.

• Maintain detailed & technical documentation of PKI infrastructure, architecture, processes, policies and standard operating procedures.

• Ensure compliance with internal security policies, industry regulations, and best practices.

• Provide support and guidance for secure communications, data protection, and identity management initiatives.

Required Qualifications:

• Bachelor’s degree in computer science, Information Security, or a related field, or equivalent experience.

• Minimum 3 years of hands-on experience with PKI technologies and digital certificate management.

• Strong understanding of X.509 certificates, CRLs, OCSP, HSMs, key management, and encryption protocols.

• Manage digital certificate lifecycles across a wide range of systems, ensuring timely issuance, renewal, revocation, and compliance.

• Familiarity with Windows and Linux-based certificate services and infrastructure.

• Experience with automation tools and scripting (e.g., PowerShell, Python, Bash) and working knowledge of with JSON and RESTful APIs.

• Strong analytical, troubleshooting and problem-solving skills.

• Excellent communication and documentation skills.

• Hands-on experience with OpenSSL, certutils, and other certificate utilities.

Preferred Qualifications:

• Experience with any CA environment, DigiCert, AppViewX, Venafi or similar certificate lifecycle management (CLM) platforms.

• Certifications such as CISSP, CEH, or AWS/Microsoft Certified, or any Identity and Access Administrator Associate.

• Knowledge of cloud-based PKI solutions and integrations (e.g., CI/CD pipelines, AWS Certificate Manager, Azure Key Vault).

• Exposure to enterprise networking and security tools, such as firewalls, load balancers, and SIEM.

• Familiarity with ITSM tools like ServiceNow for change/incident/request management.

• Exposure to enterprise security tools such as SIEMs, firewalls, load balancers, and intrusion detection systems

͏

͏

͏