PKI, HSM & Certificate Services Sr. Engineer

Overview

Support enterprise PKI, HSM, certificate lifecycle management, and cryptographic services for a global Identity and Access Management environment.

What you'll do

• Design, administer, and support enterprise PKI solutions using Microsoft ADCS and Keyfactor.
• Manage certificate issuance, renewal, revocation, inventory, policy enforcement, and automation.
• Administer Thales Luna HSM platforms, including key operations, recovery, partitions, and upgrades.
• Manage public certificate services through Sectigo and integrate them with enterprise applications.
• Troubleshoot PKI, certificate, TLS/SSL, code-signing, and cryptographic issues.
• Support certificate automation across web servers, cloud platforms, DevOps pipelines, and identity solutions.
• Participate in risk assessments, disaster recovery testing, key ceremonies, and on-call support.

What you'll need

• Bachelor’s degree or higher.
• At least 7 years of experience in enterprise PKI, certificate management, HSM, cryptography, infrastructure security, or related areas.
• At least 5 years of hands-on enterprise PKI or certificate management experience.
• Experience with Microsoft ADCS and Windows Server environments.
• Experience with Keyfactor or similar certificate lifecycle automation platforms.
• Experience administering HSM or secure key management technologies.
• Strong knowledge of X.509, CRL, OCSP, PKCS, TLS/SSL, code signing, encryption, and key management.

Nice to have

• 10+ years of enterprise PKI and certificate management experience.
• Experience with Sectigo Certificate Manager and Thales Luna HSM.
• Experience with APIs, scripting, ACME, SCEP, ServiceNow, cloud, or DevOps integrations.
• Advanced PowerShell, Python, REST API, or automation skills.

Details

• Location: Bangalore, India.
• Work mode: Hybrid.
• On-call rotation is required.