VI
PKI Engineer
VARITE INDIA PRIVATE LIMITED
🇮🇳 India
Hybrid
1 month ago
- IoT
- PKI
- NIST
- Load Balancing
- TLS
- SSL
- Active Directory
- Technical Writing
1 month ago
About The Client:
An Indian multinational information technology (IT) consulting company headquartered in Noida, The company has offices in 52 countries and over 225,944 employees. The Client is a global IT services and consulting company that offers a wide range of services and products across various industries like IT Infrastructure Services, Cybersecurity Services, Cloud Services, Big Data and Analytics, Internet of Things (IoT) Solutions, Semiconductor Services and Enterprise Software Products.
About The Job:
- Design, implement, and maintain Public Key Infrastructure (PKI) systems across internal and external environments.
- Manage secure authentication, encryption, and digital signing capabilities across enterprise systems.
- Support Microsoft ADCS, certificate lifecycle management, and integration with external PKI providers.
- Ensure PKI infrastructure remains secure, highly available, compliant, and aligned with enterprise security standards.
- Design, deploy, configure, and manage internal Certificate Authority (CA) hierarchies, including Root CA and Subordinate CA, using Microsoft ADCS.
- Implement and manage offline Root CA and online Subordinate CA environments.
- Integrate and manage external PKI services such as DigiCert for public-facing applications and enterprise services.
- Manage end-to-end certificate lifecycle processes, including certificate issuance, renewal, deployment, revocation, and retirement.
- Implement and maintain certificate lifecycle management using platforms such as Venafi.
- Develop and maintain certificate automation capabilities using Venafi, ACME clients, and other automation tools.
- Ensure compliance with enterprise security policies, certificate management best practices, and industry standards such as NIST.
- Manage Certificate Revocation List (CRL) and Online Certificate Status Protocol (OCSP) configurations.
- Implement and maintain PKI load balancing and high-availability solutions.
- Monitor PKI infrastructure and proactively identify certificate, CA, and authentication-related issues.
- Troubleshoot certificate enrollment, renewal, revocation, validation, and authentication failures.
- Manage cryptographic keys and certificates securely across enterprise environments.
- Work with Hardware Security Modules (HSMs) to protect private keys and sensitive cryptographic material.
- Collaborate with security, infrastructure, network, application, and identity teams to support secure communications and identity assurance.
- Support TLS/SSL certificate deployment and management across applications, servers, APIs, and infrastructure.
- Support code signing, document signing, and device authentication use cases.
- Maintain accurate documentation for PKI architecture, certificate policies, operational procedures, and troubleshooting processes.
- Develop and maintain PKI operational runbooks, standards, and technical documentation.
- Conduct certificate inventory and identify expired, expiring, weak, or non-compliant certificates.
- Support PKI incident investigation and root-cause analysis.
- Evaluate and implement strategies for Post-Quantum Cryptography (PQC) readiness.
- Assess cryptographic agility requirements and support migration planning for emerging cryptographic standards.
- Stay current with NIST Post-Quantum Cryptography standards and emerging PKI/security technologies.
- Exp: 9-13years
- Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related field.
- 5+ years of experience in PKI engineering, certificate management, or related security infrastructure roles.
- Strong hands-on experience with Microsoft Active Directory Certificate Services (ADCS).
- Strong understanding of offline Root CA and online Subordinate CA architectures.
- Experience designing and managing enterprise PKI environments.
- Hands-on experience with HSMs (Hardware Security Modules) for cryptographic key protection.
- Experience working with external PKI providers such as DigiCert.
- Strong understanding of certificate issuance, renewal, revocation, validation, and lifecycle management.
- Knowledge of X.509 certificate standards and TLS/SSL protocols.
- Experience with certificate automation and lifecycle management tools such as Venafi and ACME clients.
- Understanding of CRL and OCSP mechanisms and certificate validation processes.
- Experience with high-availability and load-balancing concepts for PKI infrastructure.
- Strong analytical, troubleshooting, and problem-solving skills.
- Excellent written and verbal communication skills.
- Strong documentation and technical writing abilities.
- Ability to collaborate effectively with security, infrastructure, application, and engineering teams.
- Knowledge of Post-Quantum Cryptography (PQC) concepts and cryptographic agility.
- Understanding of hybrid cryptography approaches and emerging NIST PQC standards.
- Ability to assess existing cryptographic environments and contribute to PQC migration and readiness strategies.
How to Apply:Interested candidates are encouraged to respond/submit their updated resumes, and for additional job opportunities, please visitJobs In India – VARITE.
Unlock Rewards: Refer Candidates and Earn.
If you're not available or interested in this opportunity, please pass this along to anyone in your network who might be a good fit and interested in our open positions. VARITE offers a Candidate Referral program, where you'll receive a one-time referral bonus based on the following scale if the referred candidate completes a three-month assignment with VARITE.
Experience Level Bonus Referral:
| 0-2 years | INR 5,000 |
| 2-6 years | INR 7,500 |
| 6+ years | INR 10,000 |
About VARITE: VARITE is a global staffing and IT consulting company providing technical consulting and team augmentation services to Fortune 500 Companies in USA, UK, CANADA and INDIA. VARITE is currently a primary and direct vendor to the leading corporations in the verticals of Networking, Cloud Infrastructure, Hardware and Software, Digital Marketing and Media Solutions, Clinical Diagnostics, Utilities, Gaming and Entertainment, and Financial Services.
Equal Opportunity Employer:
VARITE is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, veteran status, or disability status.
PKI Engineer · VARITE INDIA PRIVATE LIMITED