PFujitsu - Technical Services Engineer - Microsoft PKI

Role : PKI - Technical Services Engineer Expert

Work Mode : Hybrid

Location : Pune, Bangalore, Chennai, Noida

Experience : 5 - 9 Years

Employment Type : Full-time

Job Overview :

We are seeking a highly skilled PKI - Technical Services Engineer Expert with 5-9 years of experience to join our team. The ideal candidate will possess deep expertise in Public Key Infrastructure (PKI) technologies, particularly with Active Directory Certificate Services (AD CS), and experience with certificate lifecycle management solutions like CyberArk Venafi. You will be responsible for designing, implementing, and supporting robust PKI solutions, ensuring the security and integrity of digital certificates across our enterprise.

Key Responsibilities

PKI Infrastructure Management :

- Design, implement, and maintain Active Directory Certificate Services (AD CS) environments, including Certificate Authorities (CAs), Online Responders, and Certificate Enrollment Web Services.

- Manage and support certificate lifecycle automation solutions, specifically CyberArk Venafi, including its installation, configuration, and integration.

- Work with various certificate authorities like DigiCert, GlobalSign, and Microsoft CA to issue, renew, and revoke SSL/TLS certificates and other digital certificates.

Certificate Lifecycle Management :

- Manage the entire lifecycle of SSL Certificates and other digital certificates, from issuance and deployment to renewal and revocation.

- Ensure proper configuration and security of certificates across various applications and systems.

Troubleshooting & Support :

- Provide expert-level L3 support for complex PKI and certificate-related issues, diagnosing and resolving problems efficiently.

- Conduct root cause analysis for incidents and implement preventive measures.

Security & Compliance :

- Ensure PKI solutions adhere to security best practices, industry standards, and regulatory compliance requirements.

- Implement and maintain secure certificate issuance policies and procedures.

Collaboration & Documentation :

- Collaborate with cross-functional teams, including security operations, network, and application teams, to ensure seamless integration and operation of PKI services.

- Create and maintain detailed documentation for PKI architecture, configurations, and operational procedures.

Required Skills & Qualifications

Experience :

- 5-9 years of total experience in IT, with a significant focus on PKI and certificate management.

Primary Skills :

- Strong expertise in Active Directory Certificate Services (AD CS) design, deployment, and administration.

- Hands-on experience with CyberArk Venafi Solution for automated certificate lifecycle management.

Mandatory Skills :

- Direct experience working with various Certificate Authorities including DigiCert, GlobalSign, and Microsoft CA.

- In-depth knowledge and practical experience with SSL Certificates (SSL/TLS certificate management).

Technical Knowledge :

- Solid understanding of PKI concepts, cryptography, digital signatures, and certificate formats (X.509).

- Proficiency in troubleshooting PKI-related issues.

- Familiarity with Windows Server administration, including GPOs, DNS, and Active Directory.

Problem-Solving :

- Strong analytical and problem-solving skills with meticulous attention to detail.

Communication :

- Excellent written and verbal communication skills, with the ability to articulate complex technical concepts clearly.