Pki Security Analyst

Job Summary:

We are looking for a highly skilled Cyber Security Architect / Consultant with deep expertise in Public Key Infrastructure (PKI), Certificate Lifecycle Management (CLM), cryptographic technologies, Post-Quantum Cryptography (PQC), and crypto agility. The role involves designing, implementing, and modernizing enterprise cryptographic environments while ensuring scalability, compliance, and future readiness against quantum threats.

Key Responsibilities:

Architecture & Strategy

• Design and implement enterprise PKI and CLM solutions (on-premises, cloud, and hybrid).
• Define and drive cryptographic architecture, standards, and governance.
• Develop crypto agility roadmap and support transition to quantum-safe cryptography.
• Perform current-state assessment, gap analysis, and target-state architecture for cryptographic environments.
• Provide consulting and advisory to application, cloud, network, and infrastructure teams on secure cryptographic integration.

Implementation & Operations

• Lead deployment and migration of PKI hierarchies, HSM integration, key management, and certificate automation.
• Implement certificate discovery, inventory, and lifecycle automation.
• Support secure key management practices across multi-cloud and on-prem platforms.
• Integrate PKI with IAM, DevOps, containers, service mesh, and Zero Trust architectures.

Post-Quantum Readiness

• Assess quantum risk exposure across enterprise systems.
• Evaluate and recommend PQC algorithms and hybrid cryptographic models.
• Define and execute quantum-safe migration strategy.

Risk, Compliance & Governance

• Ensure compliance with NIST, ETSI, ISO 27001, PCI-DSS, and regulatory requirements.
• Conduct cryptographic risk assessments and threat modeling.
• Define policies, standards, and best practices for enterprise cryptography.

Stakeholder & Consulting

• Act as SME for cryptography and PKI in client engagements.
• Prepare and deliver technical presentations, architecture documents, and executive briefings.
• Collaborate with cross-functional teams and provide technical leadership.

Required Technical Skills

• Strong hands-on experience in PKI design, implementation, and migration.

• Expertise in Certificate Lifecycle Management (CLM) platforms.

• Deep understanding of:

• X.509 certificates, CRL, OCSP

• Key management and HSMs

• TLS/SSL, mTLS, code signing, document signing

• SSH key management

• Knowledge of crypto discovery and automation tools.

• Strong understanding of Post-Quantum Cryptography (PQC) and crypto agility frameworks.

• Experience in cloud PKI and key management (AWS, Azure, GCP).

• Scripting/automation using PowerShell, Python, Bash, or APIs.