Senior Security Engineer PKI Cryptography L3

Job Title Senior Security Engineer PKI Cryptography L3

This is a handson technical role requiring experience in enterprise PKI certificate lifecycle management cryptographic services automation and operational support The position supports internal and external PKI services implements approved designs resolves complex certificate issues and contributes to postquantum readiness activities under the direction of security architecture leaders

Work Location Pune or Chennai

Shift Timings Flexible to support 24x7 global teams planned maintenance oncall coverage and critical escalations

Key Responsibilities

Administer maintain monitor and troubleshoot internal and external PKI services and enterprise certificate lifecycle platforms

Implement approved designs and standards for Certificate Authorities Registration Authorities HSM integrations certificate repositories OCSP CRL and related components

Perform certificate enrollment approval issuance deployment renewal rotation revocation ownership updates inventory and expiration remediation

Support public and private TLS client authentication code signing device workload and machine identity certificate use cases

Investigate certificate failures trust chain issues TLS configuration keystores OCSP CRL private key handling and interoperability problems

Build and support certificate automation using ACME APIs agents agentless methods PowerShell Python and infrastructureascode tools

Assist application infrastructure and cloud teams with onboarding to centralized certificate management and approved selfservice capabilities

Support integrations with DigiCert Trust Lifecycle Manager Microsoft AD CS Azure AWS Kubernetes key vaults secrets platforms CICD pipelines monitoring and ServiceNow

Support HSM and cloud KMS activities including key generation access control rotation backup recovery and operational monitoring

Apply approved algorithms key sizes certificate profiles TLS settings and key lifecycle requirements

Contribute to TLS modernization and remediation of weak unsupported expired or noncompliant cryptographic configurations

Research NIST postquantum standards vendor capabilities hybrid cryptographic approaches and platform readiness

Support proofs of concept and pilots for hybrid or quantumresistant PKI certificates signing key management and secure communications

Document compatibility findings migration dependencies implementation steps operating procedures support runbooks and recovery procedures

Support incidents problems changes maintenance activities audit evidence collection control testing risk remediation and security exceptions

Skills and Qualifications

Work Experience Minimum 10 years of experience in information security infrastructure systems engineering or security engineering including at least 5 years supporting PKI certificate management key management or related security technologies

Education Bachelors degree in computer science cybersecurity engineering information technology or a related field or equivalent practical experience

Required Skills

Strong practical knowledge of X509 certificates TLS certificate chains trust stores enrollment renewal revocation OCSP CRL keystores and private key handling

Handson experience with DigiCert Trust Lifecycle Manager Microsoft AD CS cloud certificate services or comparable PKI technologies

Experience troubleshooting PKI and certificate issues in onpremises and cloud environments

Experience with ACME APIs PowerShell Python infrastructure as code CICD or other automation technologies

Experience supporting Azure AWS Kubernetes key vaults secrets management HSM cloud KMS or related platforms

Working knowledge of ITIL practices change management incident management technical documentation and ServiceNow

Ability to independently manage assigned technical deliverables and communicate clearly with global technical teams

Good to Have Skills

Familiarity with TLS 13 code signing digital signing machine identity NonHuman Identity security and certificate discovery tools

Awareness of NIST postquantum cryptography standards hybrid cryptography cryptoagility Cryptographic Bill of Materials concepts and migration planning

Experience with cryptographic inventory compliance monitoring policy validation audit support or disaster recovery testing

Relevant security cloud PKI automation or vendor certifications

Soft Skills

Strong communication skills Clearly communicate technical findings actions risks and status to team members and partner teams

Analytical and troubleshooting mindset Identify root causes evaluate evidence and follow structured troubleshooting and remediation steps

Ownership and reliability Manage assigned work through completion