PKI Consultant/Senior Consultant

Description :

Key Responsibilities :

- Design, implement, and manage Public Key Infrastructure (PKI) solutions including Certificate Authority (CA) deployment and certificate lifecycle management.

- Manage certificate issuance, renewal, revocation, and auto-enrollment processes.

- Work with CLM (Certificate Lifecycle Management) tools such as Keyfactor, Venafi, Sectigo Certificate Manager, AppViewX, DigiCert Trust Lifecycle Manager, and PrimeKey EJBCA.

- Implement and manage orchestration protocols such as SCEP and ACME.

- Collaborate with cloud and identity teams, with a focus on Azure, ADFS, federation, identity synchronization, and networking.

- Design and document PKI architectures, including diagrams, policies, and technical workflows.

- Configure and maintain ADCS, NDES, Azure AD, SSO, SAML, and role-based access controls.

- Provide technical guidance, best practices, and troubleshooting support to internal teams and clients.

- Ensure security compliance and standards adherence across all PKI operations.

Required Qualifications & Experience :

- Bachelors or Masters degree in Computer Science, Information Security, or a related field.

- 5+ years of experience in PKI, identity management, and certificate lifecycle management.

- Hands-on experience with Certificate Authorities, PKI components, and CLM tools.

- Strong knowledge of SCEP, ACME, ADCS, NDES, Azure AD, ADFS, SSO, and SAML.

- Experience in PKI architecture design, documentation, and deployment.

- Solid understanding of cloud identity solutions (Azure) and enterprise networking.

- Strong problem-solving, analytical, and troubleshooting skills.

- Excellent communication and collaboration skills for client-facing and internal interactions.

Preferred / Nice-to-Have Skills :

- Certifications such as Microsoft Certified : Identity and Access Administrator Associate, CISSP, or PKI-specific certifications.

- Experience with role-based access control and enterprise security policies.

- Exposure to automated certificate management and orchestration tools.

- Knowledge of DevOps/CI-CD integration for PKI certificates.

Key Competencies :

- Expertise in PKI and digital certificate management

- Strong architectural and design thinking

- Problem-solving and analytical mindset

- Effective communication and stakeholder management

- Security-focused and detail-oriented