Job Description

Must Have Technical/Functional Skills

· 5+ years of experience in Certificate Management and PKI administration.

· Strong understanding of:

o PKI architecture

o SSL/TLS protocols

o X.509 certificates

o Certificate Signing Requests (CSR)

o Certificate Authorities (CA)

· Hands-on experience with:

o Venafi, DigiCert, Entrust, Sectigo, or Microsoft PKI

o Azure Key Vault, AWS KMS, or equivalent EKM solutions

o HSM technologies (Thales, SafeNet, Luna HSM)

· Experience managing certificate lifecycle automation.

· Knowledge of cryptographic algorithms (RSA, ECC, AES, SHA-256).

Scripting experience in PowerShell, Python, or Bash

Roles & Responsibilities

· Manage end-to-end SSL/TLS certificate lifecycle including issuance, renewal, revocation, and automation.

· Administer Public Key Infrastructure (PKI) platforms such as Microsoft CA, DigiCert, Venafi, Entrust, or Sectigo.

· Manage Enterprise Key Management (EKM), encryption keys, HSMs (Hardware Security Modules), and key rotation processes.

· Implement certificate discovery, monitoring, and expiration alerting.

· Support cloud-based key management services (Azure Key Vault, AWS KMS, Google Cloud KMS).

· Ensure compliance with security standards and regulatory requirements.

· Troubleshoot certificate-related issues impacting applications, servers, APIs, and network devices.

· Automate certificate and key management processes using PowerShell, Python, or REST APIs.

· Collaborate with Security, Infrastructure, Application, and DevOps teams.