CLM PKI Senior Associate

Role & responsibilities :

Key Responsibilities

• Execute end-to-end certificate lifecycle management activities issuance, renewal, deployment, and revocation across enterprise environments.
• Perform certificate migration, deployment, and validation across platforms including IIS, Linux, Azure, F5, and Java Keystore (JKS).
• Support certificate issuance, renewal, and deployment using DigiCert and/or Venafi.
• Operate and support core PKI components Certificate Authorities (CA), Registration Authorities (RA), and Hardware Security Modules (HSM).
• Conduct pre-migration validation, testing, and rollback procedures to ensure safe cutovers.
• Assist in application onboarding and monitoring setup using tools such as SolarWinds (good to have)
• Support proof-of-concept (PoC) activities (e.g., Azure App Proxy, JKS validation).
• Troubleshoot platform and infrastructure issues (e.g., WinRM, certificate installation failures) and resolve complex PKI-related problems.
• Develop and maintain runbooks and operational documentation.
• Develop scripts and automation solutions (PowerShell, Bash) to improve operational efficiency and reduce manual effort.
• Assist in integrating CLM processes with monitoring and SIEM platforms.
• Collaborate with application owners and the security operations team for testing, validation, and cutover activities, and to enhance the overall security posture.
• Solid understanding of server set up (windows, linux) and network connectivity.

Core (Must-Have)

• Strong hands-on experience in certificate deployment and troubleshooting.
• Solid grounding in SSL/TLS and PKI fundamentals, including X.509 certificates, certificate chains, and common cryptographic protocols, standards, and algorithms.
• Working knowledge of core PKI components: Certificate Authorities (CA), Registration Authorities (RA), and Hardware Security Modules (HSM).
• Hands-on experience across multiple platforms — Windows and Linux server environments and cloud environments.
• Exposure to certificate / infrastructure monitoring tools such as SolarWinds.
• Strong analytical and troubleshooting skills to diagnose and resolve complex PKI- and certificate-related issues.