PKI Engineer L2 @ Pune

Role: PKI Engineer L2 (Public Key Infrastructure)

Location: Pune

Experience: 7-9 Years

Excellent communication skills required

KEY RESPONSIBILITIES:

• Assessment & Planning

• Assess the current PKI/CA infrastructure, including root,
  

subordinate, and issuing CAs.

• Evaluate certificate templates, issuance policies, and current
  

certificate dependencies.

• Develop a migration plan with minimal business disruption and
  

full security compliance.

• Migration & Implementation

• Install and configure new Windows Server-based CA
  

(root/subordinate as required).

• Migrate certificate templates, revocation lists (CRLs), and
  

Online Certificate Status Protocol (OCSP) responders.

• Reconfigure Group Policy Objects (GPOs) for auto-enrollment
  

and trust chain updates.

• Ensure seamless re-issuance or renewal of certificates
  

(servers, applications, end-users, devices).

• Perform coexistence or staged migration to avoid outages.
  

• Security & Compliance

• Implement industry best practices for PKI hierarchy, key
  

protection, and disaster recovery.

• Harden CA servers and enforce role separation as per
  

compliance standards (e.g., NIST, ISO, CIS).

• Ensure audit logging, monitoring, and documentation are in
  

place.

• Support & Knowledge Transfer

• Troubleshoot certificate-related issues across AD, Exchange,
  

IIS, VPN, and third-party integrations.

• Provide technical documentation of the new PKI design and
  

migration process.

• Conduct workshops and knowledge transfer sessions for internal
  

teams.

Required Skills & Experience:

• Strong expertise in

  Microsoft Active Directory Certificate

Services (AD CS)

• Hands-on experience in

  PKI migration projects

  (old CA to

new CA).

• Deep knowledge of

  certificate templates, enrollment

policies, auto-enrollment, CRLs, and OCSP

• Experience integrating PKI with Windows domain services,
  

Exchange, IIS, VPNs, SCCM, Intune, and third-party apps/devices.

• Strong understanding of

  cryptography (RSA, ECC), key

management, and TLS/SSL

• Knowledge of

  GPOs, domain trust chains, Kerberos, and smart

card authentication

• Familiarity with

  security standards

  (NIST, CIS

benchmarks, ITIL, ISO 27001).

• PowerShell scripting

  for PKI

automation (nice to have).

Qualifications:

• 7+ years of Windows Server & PKI infrastructure experience.
  
• Microsoft certification preferred (

  MCSE, MCSA, or Microsoft

Certified: Identity and Access Administrator, PKI

• Prior experience in

  large enterprise PKI migration

projects is highly desirable.

If you are interested please share your updated resume along with below details at nityananda.d@teamcomputers.com

Relevant Experience:

Current/Last CTC:

Expected CTC:

Official Notice Period:

Current Location: