PKI Support Lead

About Position:

We are seeking an experienced Senior PKI Engineer to lead and manage the design, implementation, and lifecycle of our enterprise Public Key Infrastructure (PKI). The ideal candidate will have in-depth expertise in Microsoft PKI (MSPKI) technologies, NDES/SCEP, CRL Distribution, and a strong foundation in data security practices. Candidate will work closely with cybersecurity, infrastructure, and compliance teams to ensure secure certificate-based authentication and encryption across the organization.

• Role: PKI Support Lead

• Location: All PSL Location

• Experience: 8-15years

• Job Type: Full Time Employment

What You'll Do:

• Lead the design, implementation, and maintenance of Microsoft Active Directory Certificate Services (ADCS) including Root CA, Issuing CAs, CRL Distribution Points (CDPs), and OCSP responders.
• Administer and support NDES and SCEP gateway integration with mobile device management (MDM) platforms like Microsoft Intune.
• Manage certificate lifecycle management (CLM) processes for internal and external certificates including automation, monitoring, and renewal workflows.
• Design and enforce policies around certificate issuance, revocation, and renewal to align with organizational security and compliance standards.
• Ensure CRL and OCSP infrastructure availability and redundancy across hybrid environments.
• Work with application teams to integrate TLS/SSL certificates securely for web servers, APIs, IoT devices, and internal services.
• Implement robust data security controls, encryption standards, and digital signature enforcement using PKI.
• Collaborate with compliance and audit teams for regulatory reporting and encryption feasibility assessments.
• Maintain documentation, configuration baselines, and DR plans for PKI infrastructure.

Expertise You'll Bring:

• Experience 8+ years of experience in PKI implementation and operations.
• Deep knowledge and hands-on experience with Microsoft ADCS, including Standalone and Enterprise CAs. Strong expertise in NDES, SCEP, and integration with mobile or endpoint management solutions.
• Experience in managing CRL Distribution Points, OCSP responders, and AIA locations.
• Proficiency in certificate lifecycle automation, PowerShell scripting, and use of tools like certreq, certutil, or third-party CLM platforms.
• Understanding of cryptographic protocols, X.509 standards, and certificate-based authentication.
• Working knowledge of data security concepts, including encryption at rest/in transit, key management, and regulatory compliance (e.g., DORA, GDPR, HIPAA).
• Experience in troubleshooting complex PKI issues across distributed environments.
• Experienced with HSM (Hardware Security Modules) and key protection strategies.
• Exposure to Cloud PKI or migration from on-prem PKI to cloud-native certificate services. Knowledge of Intune integration with NDES/SCEP for certificate delivery to mobile endpoints.
• Technical Skills – PKI Implementation and deployment. Certification Authentication, Certification management, NDES, SCEP, ADCS, CDPs, OCSP etc.

Benefits:

• Competitive salary and benefits package
• Culture focused on talent development with quarterly promotion cycles and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Annual health check-ups
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Inclusive Environment:

Persistent Ltd. is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We offer hybrid work options and flexible working hours to accommodate various needs and preferences.
• Our office is equipped with accessible facilities, including adjustable workstations, ergonomic chairs, and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment. We are committed to creating an inclusive environment where all employees can thrive.

Our company fosters a values-driven and people-centric work environment that enables our employees to:

• Accelerate growth, both professionally and personally
• Impact the world in powerful, positive ways, using the latest technologies
• Enjoy collaborative innovation, with diversity and work-life wellbeing at the core
• Unlock global opportunities to work and learn with the industry’s best

Let’s unleash your full potential at Persistent

“Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind.”