Systems Engineering Specialist

The PKI and Encryption Specialist is responsible for the design, implementation, and daily management of the organization's Public Key Infrastructure (PKI) and cryptographic systems. You will ensure secure communications and data integrity by managing the full lifecycle of encryption keys and digital certificates. We are currently seeking a Systems Engineering Specialist to join our team in Noida.

Responsibilities

• Infrastructure Management: Maintain and support enterprise-level PKI solutions (e.g., Microsoft ADCS, PrimeKey EJBCA, or Entrust).
• Certificate Lifecycle: Oversight of requesting, issuing, renewing, and revoking X.509 digital certificates for users, servers, and IoT devices.
• Key Governance: Manage cryptographic keys throughout their lifecycle-including generation, distribution, and secure storage-often using Hardware Security Modules (HSMs) like Thales or Entrust.
• Automation: Implement automated certificate enrollment and renewal processes using protocols like SCEP, EST, or REST APIs to prevent service outages caused by expired certificates.
• Policy Compliance: Develop and enforce Certificate Policy (CP) and Certification Practice Statements (CPS) to ensure alignment with industry standards like NIST or FIPS.
• Crypto-Agility: Lead efforts to transition from legacy algorithms (e.g., SHA-1) to modern standards and prepare for post-quantum cryptography.

Technical Skills Required

• Cryptographic Protocols: Deep understanding of TLS/SSL, SSH, PGP, and IPsec.
• Identity Management: Experience with Active Directory (AD), LDAP, and their integration with PKI for auto-enrollment.
• Encryption Platforms: Hands-on experience with tools like Gemalto KeySecure, Thales CipherTrust, or HashiCorp Vault.
• Cloud Security: Familiarity with cloud-based PKI services (e.g., AWS Certificate Manager, Azure Key Vault) and PKI as a Service (PKIaaS) models.

Experience

• 5+ years of relevant exp. is required.