Windows Server & PKI-Project Lead

Job Title: Certificate migration project Lead

Location: IN-TN-Chennai

Experience: 7+ years

Budget: 18 LPA Max.

Notice period: Immediate to 15days

Overview:

Windows Enterprise CA environments to lead the migration from an existing legacy Certification Authority (CA) to a new CA infrastructure. The role requires advanced expertise in Active Directory Certificate Services (AD CS), certificate lifecycle management, security best practices, and integration with enterprise systems.

• 7+ years of Windows Server & PKI infrastructure experience.
• Microsoft certification preferred (MCSE, MCSA, or Microsoft Certified: Identity and Access Administrator).
• Prior experience in large enterprise PKI migration projects is highly desirable

Responsibilities:

• Assessment & Planning
• Assess the current PKI/CA infrastructure, including root, subordinate, and issuing CAs.
• Evaluate certificate templates, issuance policies, and current certificate dependencies.
• Develop a migration plan with minimal business disruption and full security compliance.
• Migration & Implementation
• Install and configure new Windows Server-based CA (root/subordinate as required).
• Migrate certificate templates, revocation lists (CRLs), and Online Certificate Status Protocol (OCSP) responders.
• Reconfigure Group Policy Objects (GPOs) for auto-enrolment and trust chain updates.
• Ensure seamless re-issuance or renewal of certificates (servers, applications, end-users, devices).
• Perform coexistence or staged migration to avoid outages.
• Security & Compliance
• Implement industry best practices for PKI hierarchy, key protection, and disaster recovery.
• Harden CA servers and enforce role separation as per compliance standards (e.g., NIST, ISO, CIS).
• Ensure audit logging, monitoring, and documentation are in place.
• Support & Knowledge Transfer
• Troubleshoot certificate-related issues across AD, Exchange, IIS, VPN, and third-party integrations.
• Provide technical documentation of the new PKI design and migration process.
• Conduct workshops and knowledge transfer sessions for internal teams.

Job Types: Full-time, Permanent

Pay: ₹1,500,000.00 - ₹1,800,000.00 per year

Ability to commute/relocate:

• Chennai, Tamil Nadu: Reliably commute or planning to relocate before starting work (Required)

Application Question(s):

• Notice period
• Current CTC
• Expected CTC

Experience:

• Total: 7 years (Required)
• Windows Server: 7 years (Required)
• PKI migration: 5 years (Required)

Work Location: In person