Job
Description
Your Role
We are looking for a highly skilled PKI Administrator to join our Certificate Management team with 4 to 6 years of experience for Mumbai/Pune location . The ideal candidate will be responsible for managing the certificate lifecycle , including issuance, renewal, and revocation, and supporting enterprise PKI infrastructure . This role involves working with Microsoft Certificate Services , troubleshooting certificate and CRL-related issues, and ensuring compliance with cryptographic standards and governance policies.
Manage the complete Certificate Life Cycle issuance, renewal, and revocation. Issue certificates for internal and external service applications using internal or public Certificate Authorities (CAs). Coordinate with stakeholders to ensure timely renewal of certificates before expiry. Provide guidance for CSR (Certificate Signing Request) creation . Assist in certificate installation on Microsoft servers (IIS, certificate binding, etc.). Monitor and maintain Active Directory Certificate Services (ADCS) servers. Perform regular health checks on CA servers and monitor CRL (Certificate Revocation List) publishing schedules. Handle annual renewal of Root CA and Issuing CA certificates, and publish Root CA CRLs. Troubleshoot certificate-related issues such as trust errors, validity, incorrect purpose, hashing algorithms, and enrollment problems . Resolve CRL-related issues , including publishing and verification checks. Identify certificate needs for applications and recommend appropriate certificate types (e.g., Wildcard, Multi-domain). Manage certificate templates , including addition, deletion, modification, and permission settings.
Your Profile
Strong knowledge of PKI and cryptography standards (PKCS, X.509, PKIX, ETSI). Hands-on experience with Microsoft Certificate Services and related components. Familiarity with certificate-enabled applications (SSL/TLS, S/MIME, 802.1X, Code Signing, etc.) and cryptographic concepts (symmetric/asymmetric encryption, digital signatures). Understanding of HSMs, SSL offloading , and key/EFS recovery processes . Working knowledge of Active Directory integration with Microsoft PKI.
What you"ll love about working here
You can shape yourcareerwith us. We offer a range of career paths and internal opportunities within Capgemini group. You will also get personalized career guidance from our leaders. You will get comprehensive wellness benefits including health checks, telemedicine, insurance with top-ups, elder care, partner coverage or new parent support via flexible work. At Capgemini, you can work oncutting-edge projectsin tech and engineering with industry leaders or createsolutionsto overcome societal and environmental challenges.
