WIPRO

PKI Engineer /Microsoft ADCS Engineer/ Cipher Trust Manager

Experience 7-15 Yrs

Budget - 26 to 33LPA

Location – PAN India

Mandatory Skills -
-Thales Luna SA HSM

-Thales CiphertrustManager KMS

-Microsoft ADCS PKI

-A PKI / ADCS Engineer is responsible for designing, deploying, and managing enterprise Public Key Infrastructure including Root CA, Intermediate CA, and Issuing CA servers while ensuring secure certificate issuance and validation processes. The role involves hands-on management of Microsoft ADCS components such as NDES (SCEP), CEP/CES services, and integration with Active Directory for auto-enrollment and authentication.
-The engineer must manage complete certificate lifecycle activities including certificate request, issuance, renewal, revocation, and troubleshooting of certificate-related issues across users, systems, and applications. Robust understanding of certificate store architecture and certificate chain validation is required to ensure trust relationships within enterprise environments.
-The role requires implementation and maintenance of Certificate Policy (CP) and Certification Practice Statement (CPS) aligned to organizational security standards and compliance requirements. The candidate should also manage CRL infrastructure including base CRL and delta CRL, ensuring proper publication and accessibility via CDP and AIA locations.




-The engineer should possess strong knowledge of cryptographic principles including asymmetric and symmetric encryption, hashing, and digital signatures along with practical understanding of PKCS standards, Cryptographic Service Providers (CSP), and Key Storage Providers (KSP).
-The role involves supporting SSL/TLS certificates across internal and external applications and ensuring adherence to industry standards like X.509 and TLS protocols. Strong troubleshooting skills are required for resolving issues related to certificate enrollment, chain errors, CRL accessibility, and authentication failures.
-The candidate must have good understanding of Active Directory including Group Policy, auto-enrollment configuration, and integration with PKI services for enterprise identity and access management.
-The role includes ensuring PKI high availability, fault tolerance, and disaster recovery by implementing proper backup, restore, and redundancy mechanisms across CA servers and related infrastructure.
-The engineer should work on operational support, monitoring PKI health, performing RCA for incidents, and maintaining documentation for PKI processes and environments.
Optional skills include experience with Linux-based certificate management, OpenSSL tools, cloud PKI platforms (Azure/AWS), and HSM integration for secure key management.

Tracker

📌 Public Key Infrastructure Engineer/Microsoft ADCS | Thales Luna SA HSM (Telangana)
🏢 Wroots Global
📍 Telangana