Information Security Engineer III- Eng (DigiCert, PKI & Secrets Management)

Overview

Design, implement and support enterprise PKI and secrets management solutions that secure applications, infrastructure and cloud workloads within UKG's Identity & Access Management team.

What you'll do

• Design, implement, administer and optimize enterprise PKI solutions using DigiCert.
• Manage the complete certificate lifecycle, including issuance, renewal, revocation, discovery and automated deployment through Certificate Lifecycle Management (CLM).
• Administer and support Google Secret Manager and HashiCorp Vault for secure storage, rotation and access to secrets, certificates and encryption keys.
• Collaborate with application, infrastructure and DevOps teams to integrate PKI, certificate automation and secrets management into enterprise platforms and CI/CD pipelines.
• Implement automation for certificate provisioning, renewal and secret rotation using APIs, scripting and infrastructure-as-code practices.
• Monitor PKI infrastructure and certificate health to ensure service availability and compliance.
• Troubleshoot certificate, TLS/SSL, secrets management and authentication issues across cloud and on-premises environments.
• Develop operational documentation, runbooks and standard operating procedures.
• Support security audits, regulatory compliance and vulnerability remediation related to certificates, cryptographic assets and secrets management.
• Stay current with emerging technologies and security best practices related to PKI, cryptography and cloud-native security.

What you'll need

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity or a related field.
• 5–9 years of experience in Information Security, IAM, Infrastructure Security or Cloud Security Engineering.
• Hands-on experience administering DigiCert PKI and Certificate Lifecycle Management (CLM) solutions.
• Experience managing enterprise TLS/SSL certificates, code-signing certificates, client certificates and certificate automation.
• Experience with Google Secret Manager and HashiCorp Vault for enterprise secrets management.
• Strong understanding of PKI concepts, X.509 certificates, Certificate Authorities (CA), cryptographic key management, TLS/SSL, CSR generation, OCSP and CRL.
• Experience integrating PKI and secrets management solutions with enterprise applications and cloud platforms.
• Experience with automation using REST APIs, PowerShell, Python or Shell scripting.
• Experience with Google Cloud Platform (GCP).
• Strong analytical, troubleshooting and problem-solving skills.

Nice to have

• Exposure to AWS or Azure.
• Experience integrating PKI and secrets management into Kubernetes, containers and CI/CD platforms.
• Familiarity with Infrastructure as Code tools such as Terraform.
• Knowledge of identity and access management concepts, including authentication, authorization and Zero Trust architecture.
• Experience supporting compliance frameworks such as SOC 2, ISO 27001, PCI DSS or SOX.
• Relevant certifications such as DigiCert, HashiCorp Vault Associate, Google Cloud Security, Security+ or CISSP are desirable.

Details

• Location: Noida, Uttar Pradesh, India.