Security Architect

Project Role : Security Architect

Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.

Must have skills : Data Encryption

Good to have skills : NA

Minimum 7.5 Year(s) Of Experience Is Required

Educational Qualification : 15 years full time education

Summary:

The L8 Build Engineer will be responsible for designing, implementing, upgrading, automating, and enhancing the organization's PKI, Certificate Lifecycle Management, and Encryption/Key Management platforms. This role will drive transformation initiatives, platform modernization, integrations, and engineering activities across Microsoft PKI, Venafi, and Thales Cipher Trust while ensuring security, scalability, and operational readiness. Based on your PKI roadmap activities, this includes Venafi upgrades, Cipher Trust upgrades, PKI modernization, automation, and platform integrations.

Roles & Responsibilities:

• Design and implement Microsoft PKI solutions, including Root CA, Intermediate CA, Issuing CA, CRL, OCSP, and NDES services.
• Plan and execute PKI upgrades, migrations, renewals, and decommissioning activities.
• Develop high availability and disaster recovery solutions for PKI services.
• Define PKI standards, certificate templates, lifecycle policies, and governance controls.
• Lead PKI modernization and cloud integration initiatives.
• Lead build projects, enhancements, and transformation initiatives.
• Prepare technical design documents, implementation guides, and build runbooks.
• Coordinate with security architects, infrastructure teams, vendors, and application owners.
• Support transition of build activities into RUN operations.
• Provide technical leadership, mentoring, and KT sessions for support teams.
• Ensure PKI and encryption services comply with organizational security standards.
• Conduct security reviews, hardening, and vulnerability remediation.
• Support audits and compliance assessments.
• Develop security baselines and architecture standards.
• Develop automation solutions using PowerShell, REST APIs, Python, or similar technologies.
• Automate certificate renewals, deployment validation, monitoring, and governance workflows.
• Build integrations between Venafi, CipherTrust, ServiceNow, Active Directory, and cloud platforms.
• Identify manual activities and implement self-service or automated solutions.
• Drive Infrastructure as Code (IaC) and configuration management practices.
• Design and implement Thales Cipher Trust Manager solutions.
• Support encryption lifecycle management, key management, and secrets protection capabilities.
• Perform platform upgrades, migrations, and integration activities.
• Implement key rotation, backup, recovery, and compliance controls.
• Design secure integration with enterprise applications, databases, and cloud services.
  
  

Professional & Technical Skills:

• Microsoft ADCS
• Certificate Authorities (Root, Intermediate, Issuing)
• CRL, OCSP, NDES
• SSL/TLS and Cryptography
• HSM Integration
• Venafi TPP / TLS Protect
• Certificate Lifecycle Automation
• Certificate Discovery
• Certificate Governance
• API Integration
• Thales Cipher Trust Manager
• Encryption Key Management
• Secrets Management
• KMIP
• HSM and Vault Integration
• PowerShell
• Active Directory
• Windows Server Administration
  
  

Additional Information:

• The candidate should have minimum 8-10 years of Cybersecurity, IAM, PKI, or Encryption experience.
• 3+ years designing and implementing PKI solutions.
• Hands-on experience with Venafi and certificate automation.
• Experience with Cipher Trust, HSMs, or enterprise encryption platforms.
• Experience leading security engineering or transformation projects.
• Venafi Certified Professional
• This position is based at our Bengaluru office.