Job Description & Scope
Job description Role & Responsibilities: Design, deploy, and maintain PKI infrastructure including certificate authorities (CAs), OCSP, CRLs, and templates. Manage full certificate lifecycle management (CLM) issuance, renewal, revocation, and monitoring. Ensure compliance with certificate policies and practices as per internal and external standards. Configure and support public and private certificate authorities (e.g., DigiCert, Sectigo, GlobalSign). Work with certificate lifecycle management tools and maintain visibility into certificate expiration and risks. Implement secure communication using SSL/TLS, HTTPS, and related security protocols. Automate certificate processes using PowerShell, Python, or scripting tools. Ensure certificate policy documentation is up-to-date and audit-ready. Troubleshoot issues related to certificates, encryption, or authentication failures across platforms. Collaborate with cloud teams to implement cloud-native certificate solutions (e.g., AWS ACM, Azure Key Vault). Support incident response involving cryptographic or certificate-related issues. Provide outstanding customer support and service in high-pressure situations. Maintain clear and accurate documentation of PKI architecture and operational procedures. Assist in internal security awareness regarding digital certificates and encryption. Preferred Candidate Profile: 3 - 7 years of hands-on experience in PKI design, deployment, and operations. Strong understanding of encryption algorithms (RSA, ECC), certificate standards (X.509), and secure protocols (TLS/SSL). Experience with Microsoft ADCS and cloud-based PKI systems (Azure, AWS). Proficiency in scripting (PowerShell, Python preferred). Relevant certifications like CISSP, CompTIA Security+, or Microsoft Security certs are a plus. Educational Qualification: Bachelor's or Masters degree in Computer Science, IT, or equivalent field.onsibilities Role: System Security Engineer Industry Type: IT Services & Consulting Department: IT & Information Security Employment Type: Full Time, Permanent Role Category: IT Security Education UG: B.Sc in Maths, Statistics, BCA in Computers PG: M.Tech in Any Specialization, MCA in Any Specialization, MS/M.Sc(Science) in Any Specialization Key Skills Skills highlighted with ‘‘ are preferred keyskills PowershellEncryptionPki CertificatesDigital CertificatesCryptography RSAAutomationHsmECCLDAPComplianceVenafiKey VaultAdcsSecuritySSLPKIOcspIAMAuthenticationTL
