Cyber Security – PKI & Certificate Management (L3 / Senior Engineer)
Role Overview
We are seeking a Senior PKI & Certificate Management Engineer (L3) to support the implementation, operations, and continuous improvement of enterprise PKI and certificate services across on‑prem and hybrid cloud environments.
The role focuses on hands‑on certificate lifecycle management, platform administration, automation, and troubleshooting, working closely with Architecture, IAM, Cloud, Network, and DevOps teams to ensure secure and reliable certificate services with zero certificate‑related outages.
Key Responsibilities
PKI Operations & Engineering
- Support implementation and administration of Root and Issuing CAs under defined enterprise PKI architecture.
- Manage certificate lifecycle activities including issuance, renewal, rotation, revocation, escrow, archival, and destruction.
- Perform hands‑on configuration and support for TLS, mTLS, code signing, device certificates, and service certificates.
- Assist in maintaining OCSP and CRL services, ensuring high availability and proper certificate validation.
- Support HSM operations, including key generation, backups, restores, and routine maintenance under dual‑control procedures.
- Troubleshoot certificate issues impacting applications, APIs, devices, and infrastructure.
Platform & Technology Support
- Operate and support PKI platforms such as:
- Microsoft AD CS
- EJBCA
- Venafi / Keyfactor / DigiCert
- AWS Private CA / Azure Key Vault backed CA
- Integrate certificates with:
- Web servers (IIS, NGINX, Apache)
- Load balancers (F5, Netscaler, ALB)
- API gateways and service mesh environments
- Support certificate onboarding and automation for cloud, containers, Kubernetes, and DevOps pipelines.
Automation & Tooling
- Implement and maintain certificate automation using:
- ACME, cert‑manager
- Scripts (PowerShell, Bash, Python)
- REST APIs provided by certificate platforms
- Assist CI/CD teams with certificate deployment and renewal processes.
- Support GitOps‑based workflows for certificate operations.
Governance, Risk & Compliance (Support Role)
- Assist with maintaining PKI documentation such as CP/CPS, runbooks, and standard operating procedures.
- Support audit activities by providing logs, evidence, and configuration details (SOX, PCI DSS, ISO 27001, HIPAA, GDPR).
- Perform periodic checks to identify:
- Expiring certificates
- Weak cryptographic configurations
- Shadow or unmanaged certificates
- Follow defined least‑privilege and segregation‑of‑duties controls for PKI and HSM access.
Incident & Security Support
- Support incident response activities related to:
- Certificate mis‑issuance
- Key compromise
- Certificate‑related outages
- Execute defined incident response and recovery playbooks.
- Participate in post‑incident reviews and remediation activities.
Required Skills & Qualifications
Core Technical Skills
- Strong understanding of PKI fundamentals and X.509 certificates
- Hands‑on experience with TLS 1.2 / TLS 1.3, OCSP, CRL, EKU, SAN
- Experience with RSA, ECC, SHA‑2 (awareness of PQC is a plus)
- Working experience with at least two PKI platforms:
- AD CS, EJBCA, Venafi, Keyfactor, DigiCert, AWS Private CA, Vault PKI
- Exposure to HSMs and key management (Thales, Entrust, SafeNet, CloudHSM)
Automation & Integration
- Scripting experience using PowerShell, Bash, or Python
- Certificate automation using ACME / cert‑manager
- Integration with:
- AD / Entra ID
- Linux / Windows systems
- Secrets managers (Vault, AKV, AWS Secrets Manager)
Professional Experience
- 6–14years overall IT experience
- 7+ years of hands‑on experience in PKI & certificate management
- Experience working as a Senior Engineer / L3 support in enterprise environments
Location – Bangalore, White field
Work Type – Hybrid
Job Type – Full Time
Interview Process:
- Technical Round
- R2 – Technical round
- Compensation Discussion
- HR Discussion
Wissen Infotech:
LinkedIn: https://www.linkedin.com/company/wissen-infotech/mycompany/verification/
Website: https://www.wissen.com/
About company:
We provide technical solutions to complex business problems of our customers. Our people are the core of everything we do and we make sure they feel professionally fulfilled. Today Wissen has over 4000 IT professionals delivering world-class IT Services and Solutions to clients worldwide. Wissens services include Technology Consulting, Software Development, Application Services, Systems Integration, Re-engineering, and Independent Testing Services.
Wissen utilizes its multi-location facilities and industry standards to provide best-in-class solutions for clients. Wissen leverages its multi-site facilities in USA and India, offering customers a combination of onsite, offsite, and offshore service models. Wissen is uniquely positioned to help you with your needs in building enterprise systems, adopting a visualization and business intelligence stack, or implementing a Digital strategy
