Role Descriptions: Manage end-to-end SSLTLS certificate lifecycle including issuance, renewal, revocation, and automation.Administer Public Key Infrastructure (PKI) platforms such as Microsoft CA, DigiCert, Venafi, Entrust, or Sectigo.Manage Enterprise Key Management (EKM), encryption keys, HSMs (Hardware Security Modules), and key rotation processes.Implement certificate discovery, monitoring, and expiration alerting.Support cloud-based key management services (Azure Key Vault, AWS KMS, Google Cloud KMS).Ensure compliance with security standards and regulatory requirements.Troubleshoot certificate-related issues impacting applications, servers, APIs, and network devices.Automate certificate and key management processes using PowerShell, Python, or REST APIs.Collaborate with Security, Infrastructure, Application, and DevOps teams.
Essential Skills: Role Requirements5 years of experience in Certificate Management and PKI administration.Strong understanding of oPKI architectureoSSLTLS protocolsoX.509 certificatesoCertificate Signing Requests (CSR)oCertificate Authorities (CA)Hands-on experience with oVenafi, DigiCert, Entrust, Sectigo, or Microsoft PKIoAzure Key Vault, AWS KMS, or equivalent EKM solutionsoHSM technologies (Thales, SafeNet, Luna HSM)Experience managing certificate lifecycle automation.Knowledge of cryptographic algorithms (RSA, ECC, AES, SHA-256).Scripting experience in PowerShell, Python, or Bash.PreferredExperience in hybrid cloud environments (Azure, AWS, Google Cloud Platform).Knowledge of DevSecOps and CICD integration.Experience with Kubernetes secrets and certificate management.Security certifications such as oCISSPoSecurityoAzure Security Engineer (AZ-500)oCertified PKI Professional
Skills: Cyber Security
Experience Required: 6-8
