Greetings from TCS!!

Role-Delinea

Experience-6 to 10 yrs

Location-Kolkata

Desired Competencies (Technical/Behavioral Competency)

Must-Have

We are seeking a highly motivated and technically skilled PAM/PKI Engineer to support and maintain enterprise Privileged Access Management (PAM) and Public Key Infrastructure (PKI) environments. The ideal candidate will possess solid experience in certificate lifecycle management, Microsoft Active Directory Certificate Services (ADCS), enterprise authentication systems, and privileged access security solutions. The role will be responsible for ensuring secure certificate operations, maintaining PKI infrastructure, supporting PAM integrations, and driving compliance with organizational security standards.

Responsibility of / Expectations from the Role Perform end-to-end certificate lifecycle management, including like Support enterprise PKI infrastructure and Certificate Authorities (CAs) using established procedures, standards, and operational runbooks

Manage and troubleshoot Active Directory Certificate Services (ADCS), Online Certificate Status Protocol (OCSP), and certificate-based authentication services

Administer certificate templates, trust chains, Certificate Revocation Lists (CRLs), Authority Information Access (AIA), and Group Policy Objects (GPOs)

Support Root CA and Subordinate CA operations, including CRL publication and renewal activities

Maintain certificate-based security solutions across web servers, applications, network devices, firewalls, proxies, and authentication platforms.

Monitor certificate health and proactively address certificate expiration or configuration issues

Experience

3–7+ years of experience in PKI, IAM, Cybersecurity, or PAM administration.





Experience supporting enterprise-scale certificate management and privileged access environments.

Proven experience in incident response, troubleshooting, and operational support for security infrastructure.

Privileged Access

Management (PAM)

Support and administer PAM solutions such as CyberArk, Delinea (Thycotic), BeyondTrust, or equivalent platforms.

Manage privileged account onboarding, credential rotation, vault administration, and access governance.

Support integration of PAM solutions with Active Directory, LDAP, cloud services, and enterprise applications.

Assist in implementing least-privilege access controls and privileged session management.

Support privileged account audits, compliance reporting, and security reviews.

Identity and Access Management (IAM)

Support PKI-integrated IAM solutions, including authentication, federation, authorization, and access control frameworks.

Collaborate with IAM teams to implement certificate-based authentication and secure access solutions.

Assist with troubleshooting identity and authentication-related incidents involving certificates or privileged accounts.

Security and Cryptography

Maintain working knowledge of: TLS/SSL protocols

Encryption technologies

Cipher suites

Digital certificates

Cryptographic standards

Ensure alignment with security and compliance frameworks such as: NIST

FIPS

Industry best practices





Support Hardware Security Modules (HSMs) and key management activities.

Documentation & Operational Excellence

Create, update, and maintain technical documentation, standard operating procedures, runbooks, and knowledge articles.

Participate in incident management, troubleshooting, root cause analysis, and problem resolution.

Utilize ticketing and collaboration tools such as JIRA, HEAT, ServiceNow, or equivalent platforms for issue tracking and service requests.

Work closely with infrastructure, security, networking, and application teams to support enterprise security initiatives.

Required Skills & Qualifications

Technical Skills

Strong understanding of PKI concepts: X.509 Certificates

Certificate Templates

Public/Private Keys

Trust Chains

CRL/AIA

OCSP

Certificate-Based Authentication

Hands-on experience with: Microsoft Active Directory Certificate Services (ADCS)

Active Directory and Directory Services

Certificate Lifecycle Management platforms (Venafi, CyberArk, Delinea, or equivalent)

Experience supporting enterprise authentication, federation, and identity management environments.

Working knowledge of: Windows Server Administration

Linux Administration

Network Security Concepts

TLS/SSL configurations

Exposure to Hardware Security Modules (HSMs) and cryptographic key management.

Soft Skills

Strong troubleshooting and analytical skills.

Excellent organizational and documentation abilities.

Ability to communicate effectively with both technical and non-technical stakeholders.

Capability to work independently and within cross-functional teams.

Strong attention to detail and commitment to security best practices.

📌 Delinea (Kolkata)
🏢 Tata Consultancy Services
📍 Kolkata