Security Architect

Project Role : Security Architect

Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.

Must have skills : Data Encryption

Good to have skills : NA

Minimum 5 Year(s) Of Experience Is Required

Educational Qualification : 15 years full time education

Summary:

The L9 Security Team Lead will be responsible for the day-to-day operation, governance, and support of the Public Key Infrastructure (PKI), Venafi Certificate Lifecycle Management, and Thales Cipher Trust platforms. The role will ensure secure certificate lifecycle management, encryption key management, operational stability, SLA compliance, and continuous service improvement while acting as the primary technical escalation point for the Certificate Management team.

Roles & Responsibilities:

• Manage and support Microsoft PKI infrastructure, including Root CA, Intermediate CA, and Issuing CA components.
• Perform certificate issuance, renewal, replacement, revocation, and retirement activities.
• Monitor CA health, CRL publication, OCSP services, and certificate validity.
• Support disaster recovery testing, backup, restoration, and PKI maintenance activities.
• Execute certificate troubleshooting and root cause analysis for certificate-related incidents.
• Manage end-to-end certificate lifecycle through Venafi.
• Coordinate certificate renewals with application, infrastructure, and network teams.
• Troubleshoot certificate enrollment, CSR, SAN, DNS, and validation issues.
• Manage certificate expiration monitoring and proactive notifications.
• Support Venafi upgrades, integrations, reporting, and automation initiatives.
• Maintain certificate inventory and ensure compliance with organizational standards.
• Act as L3/L4 escalation point for complex PKI, Venafi, and CipherTrust issues.
• Monitor incidents, service requests, changes, and problem records within SLA.
• Conduct ticket reviews, backlog management, and operational reporting.
• Prepare and present Weekly Service Reviews (WSR) and Monthly Service Reviews (MSR).
• Maintain runbooks, SOPs, KT documents, and operational procedures.
• Drive automation, process improvements, and service optimization initiatives.
  
  

Professional & Technical Skills:

• Microsoft PKI (ADCS, CA, CRL, OCSP, NDES)
• Venafi Trust Protection Platform / TLS Protect
• Thales CipherTrust Manager
• HSM concepts and key management
• SSL/TLS certificates and cryptography
• Windows Server Administration
• Active Directory & Entra ID fundamentals
• ServiceNow Incident, Change, and Request Management
• PowerShell scripting and automation
  
  

Additional Information:

• The candidate should have minimum 6-10 years in Cybersecurity/IAM/PKI operations.
• Hands-on experience in enterprise PKI administration.
• Hands-on experience with Venafi certificate lifecycle management.
• Experience with encryption and key management platforms such as Cipher Trust.
• Client-facing operational support and service management experience.
• This position is based at our Bengaluru office.