- Good understanding, strong conceptual and hands on experience around PKI Infrastructure. Should be a SME for PKI and Encryption service(HSM, Certificate Authority, External certificates, Storage of encryption keys, etc.)

- Experience in Hardware Security Module(HSM) operations.

- Experience in Certificate Lifecycle Management solutions.

- Experience in External PKI(Digicert, Lets Encrypt, Sectigo etc), Root CA, Issuing CA, CRL, OCSP, NDES etc.

- Strong experience with Microsoft Certificate Services.

- Strong understanding in Cryptography.

- Experience with certificate-enabled applications such as SSL/ TLS authentication, EFS, 802.1x, Code Signing etc.

- Knowledge on Certificate Lifecycle Management (CLM) solutions such as AppViewX, Venafi, Keyfactor etc.

- Excellent written and verbal skills are required

Good to have :

- Experience in implementation of Microsoft PKI.

- Experience in implementation of Hardware Security Module(HSM).

- Experience in PKI and HSM migration/ upgrades.

- Experience in Certificate and Key migration.

- Experience in PKI cloud solution development with Azure, AWS architectures.

Responsibility :

1. Provide hands on engineering support required to build and maintain Internal and External PKI systems.

2. Perform PKI operational activities such as Certificate Issuance/ Renewal, CRL publish/ renewal, Certificate Authority renewal, Software/ Patch updates etc.

3. Perform HSM related operational tasks, backup, maintenance and upgrades.

4. Plan and execute certificate automation for various keystores, appliances and applications.

5. Ensure PKI systems align to the Information Security policies, standards and the industrys best practices.

6. Respond to Incident/ Change Management System tickets.