MS PKI - CLM Solution Architect (Certificate Lifecycle) | Pan India

Job Summary

Value Innovation Labs is hiring an experienced PKI and Certificate Lifecycle Management (CLM) professional to lead and enhance enterprise-wide PKI for a leading enterprise client. You will own the design, implementation and governance of CLM platforms across on-prem, cloud and hybrid environments.

Mandatory Skills

• ADCS (Active Directory Certificate Services) PKI implementation is mandatory, along with strong CLM expertise

• Minimum 8-9 years of core, hands-on PKI experience

• Hands-on with at least one of AppViewX CERT+ (preferred), CyberArk Certificate Manager, Venafi Trust Protection Platform, DigiCert or Keyfactor

Roles & Responsibilities

• Lead the design, implementation and management of enterprise CLM on AppViewX, CyberArk, Venafi, Keyfactor and Microsoft PKI

• Lead certificate lifecycle operations: discovery, issuance, renewal, revocation, deployment and monitoring

• Administer CLM platforms and Microsoft PKI (ADCS) environments

• Configure and maintain integrations with AD CS, public CAs, cloud platforms (Azure, AWS, GCP) and enterprise applications

• Integrate CLM with ITSM, load balancers, web servers and DevOps toolchains

• Design certificate automation workflows using native capabilities, REST APIs, PowerShell and scripting

• Manage certificate inventories and enforce governance, compliance and risk controls

• Define and enforce policies for certificate issuance, key management, cryptographic standards and private key protection

• Build reporting, monitoring and auditing for certificate health and compliance

• Support onboarding and automation across servers, applications, load balancers, cloud and containers

• Partner with Security, Infrastructure, Cloud, DevOps and Application teams

• Advise on PKI architectures, protocols, trust models and automation strategy

• Mentor team members and drive continuous improvement

• Stay current on machine identity, PKI and cybersecurity trends

Desired Candidate Profile

• 8 to 13 years of overall experience, with at least 8-9 years of hands-on PKI experience

• Proven ADCS (Microsoft PKI) implementation experience

• Hands-on experience with at least one major CLM tool: AppViewX, CyberArk Certificate Manager, Venafi or Keyfactor

• Knowledge of public CAs such as DigiCert, Sectigo, Entrust and GlobalSign

• Working knowledge of ACME, EST and SCEP protocols

• Familiarity with Azure Key Vault, AWS Certificate Manager and Google CAS

• Strong PowerShell and REST API scripting skills

• ServiceNow integration experience is a plus

• Strong PKI architecture and certificate governance knowledge

• Good communication and stakeholder management skills

Why Apply

• Permanent role on Value Innovation Labs payroll with a marquee enterprise client

• Hybrid work mode; openings across Mumbai, Pune, Bengaluru, Chennai, Hyderabad, Delhi NCR and Kolkata

• Ownership of enterprise PKI and machine identity architecture

• Immediate to 30 days notice preferred (up to 60 days considered for strong profiles)