Senior PKI Engineer

Lead and manage certificate lifecycle operations, including issuance, renewal, revocation, and monitoring of digital certificates across enterprise environments.

Demonstrate deep expertise in encryption standards, cryptographic protocols, and PKI components such as X.509 certificates, RSA, ECC, and SHA algorithms.

Administer and integrate Certificate Authorities (CAs) including public and private CAs, with a strong understanding of trust models and hierarchical PKI structures.

Hands-on experience with AWS Certificate Manager (ACM) and other cloud-native certificate services for secure deployment and management of TLS/SSL certificates.

Implement and maintain certificate services in multi-cloud environments, including AWS, Azure, and other public cloud platforms, ensuring compliance and security best practices.

Configure and manage Active Directory Certificate Services (AD CS) for enterprise certificate issuance, group policies, and auto-enrollment.

Develop and maintain automation scripts using PowerShell, Python, or Bash to streamline certificate operations and reduce manual overhead.

Design and enforce security policies related to PKI, including key management, certificate validation, and secure storage of private keys.

Establish robust reporting and auditing mechanisms for certificate usage, expiration tracking, and compliance with internal and external regulations.

Collaborate with security, infrastructure, and DevOps teams to integrate PKI solutions into CI/CD pipelines, applications, and network infrastructure.

Strong knowledge of Venafi.

Working shift -> Regular shift (2:00 pm to 10:30pm). Must be flexible to different shift pattern per business needs.