Key Responsibilities

- Design, implement, and maintain enterprise PKI infrastructure.
- Install, configure, and manage Microsoft PKI (Active Directory Certificate Services) and/or other PKI platforms.
- Manage Certificate Authorities (Root CA, Subordinate CA) and certificate lifecycle (issuance, renewal, revocation, expiration).
- Configure and manage Online Certificate Status Protocol (OCSP) and Certificate Revocation Lists (CRL).
- Implement and maintain Hardware Security Modules (HSM) for secure key management.
- Troubleshoot certificate-related issues across servers, applications, VPNs, web servers, and network devices.
- Support SSL/TLS certificate deployment and management for enterprise applications.
- Automate certificate management using PowerShell, Python, or scripting tools.
- Ensure compliance with security standards and industry best practices.
- Perform PKI health checks, monitoring, backup, disaster recovery, and documentation.
- Collaborate with security, infrastructure, cloud, and application teams during certificate integration and troubleshooting.
- Participate in security audits and vulnerability remediation activities.

Required Skills

- Robust knowledge of Public Key Infrastructure (PKI) concepts.
- Experience with Microsoft Active Directory Certificate Services (ADCS).




- Hands-on experience with SSL/TLS certificates, certificate enrollment, renewal, and revocation.
- Knowledge of X.509 certificates, CRL, OCSP, and Certificate Templates.
- Experience with Hardware Security Modules (HSMs) such as Thales, SafeNet, or Entrust.
- Understanding of cryptographic algorithms (RSA, ECC, AES, SHA-2).
- Experience with Windows Server, Active Directory, DNS, and Group Policy.
- Familiarity with PowerShell, Python, or Bash scripting.
- Knowledge of PKI integration with web servers (IIS, Apache, NGINX), VPNs, and cloud platforms.

Preferred Skills

- Experience with cloud certificate management in Microsoft Azure, AWS, or Google Cloud.
- Familiarity with PKI solutions such as DigiCert, Entrust, Venafi, or Keyfactor.
- Knowledge of identity and access management (IAM) and Zero Trust security.
- Experience with automation and DevSecOps practices.

Education

- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Preferred Certifications

- CompTIA Security+
- Microsoft Certified: Cybersecurity Architect Expert
- Certified Information Systems Security Professional (CISSP)
- Certified Information Security Manager (CISM)
- ITIL Foundation

📌 Pki Security Analyst (Uttar Pradesh)
🏢 Athena Bharatjobs
📍 Uttar Pradesh