Greetings from TCS!! Role-Delinea Experience-6 to 10 yrs Location-Kolkata Desired Competencies (Technical/Behavioral Competency) Must-Have We are seeking a highly motivated and technically skilled PAM/PKI Engineer to support and maintain enterprise Privileged Access Management (PAM) and Public Key Infrastructure (PKI) environments. The ideal candidate will possess strong experience in certificate lifecycle management, Microsoft Active Directory Certificate Services (ADCS), enterprise authentication systems, and privileged access security solutions.

The role will be responsible for ensuring secure certificate operations, maintaining PKI infrastructure, supporting PAM integrations, and driving compliance with organizational security standards. Responsibility of / Expectations from the Role 1. Perform end-to-end certificate lifecycle management, including like

- Support enterprise PKI infrastructure and Certificate Authorities (CAs) using established procedures, standards, and operational runbooks
- Manage and troubleshoot Active Directory Certificate Services (ADCS), Online Certificate Status Protocol (OCSP), and certificate-based authentication services
- Administer certificate templates, trust chains, Certificate Revocation Lists (CRLs), Authority Information Access (AIA), and Group Policy Objects (GPOs)

5.

Support

Root CA and Subordinate CA operations, including CRL publication and renewal activities

- Maintain certificate-based security solutions across web servers, applications, network devices, firewalls, proxies, and authentication platforms.
- Monitor certificate health and proactively address certificate expiration or configuration issues

8.

Experience - 3–7+ years of experience in PKI, IAM, Cybersecurity, or PAM administration.





- Experience supporting enterprise-scale certificate management and privileged access environments.
- Proven experience in incident response, troubleshooting, and operational support for security infrastructure. 1.

Privileged Access

Management (PAM) - Support and administer PAM solutions such as CyberArk, Delinea (Thycotic), BeyondTrust, or equivalent platforms.

- Manage privileged account onboarding, credential rotation, vault administration, and access governance.
- Support integration of PAM solutions with Active Directory, LDAP, cloud services, and enterprise applications.
- Assist in implementing least-privilege access controls and privileged session management.
- Support privileged account audits, compliance reporting, and security reviews. Identity and Access Management (IAM) - Support PKI-integrated IAM solutions, including authentication, federation, authorization, and access control frameworks.
- Collaborate with IAM teams to implement certificate-based authentication and secure access solutions.
- Assist with troubleshooting identity and authentication-related incidents involving certificates or privileged accounts. Security and Cryptography - Maintain working knowledge of:
- TLS/SSL protocols
- Encryption technologies
- Cipher suites
- Digital certificates
- Cryptographic standards
- Ensure alignment with security and compliance frameworks such as:
- NIST
- FIPS
- Industry best practices




- Support Hardware Security Modules (HSMs) and key management activities. Documentation & Operational Excellence - Create, update, and maintain technical documentation, standard operating procedures, runbooks, and knowledge articles.
- Participate in incident management, troubleshooting, root cause analysis, and problem resolution.
- Utilize ticketing and collaboration tools such as JIRA, HEAT, ServiceNow, or equivalent platforms for issue tracking and service requests.
- Work closely with infrastructure, security, networking, and application teams to support enterprise security initiatives. 1.

Required Skills & Qualifications Technical Skills - Strong understanding of PKI concepts:

- X.509 Certificates
- Certificate Templates
- Public/Private Keys
- Trust Chains
- CRL/AIA
- OCSP
- Certificate-Based Authentication
- Hands-on experience with:
- Microsoft Active Directory Certificate Services (ADCS)
- Active Directory and Directory Services
- Certificate Lifecycle Management platforms (Venafi, CyberArk, Delinea, or equivalent)
- Experience supporting enterprise authentication, federation, and identity management environments.
- Working knowledge of:
- Windows Server Administration
- Linux Administration
- Network Security Concepts
- TLS/SSL configurations
- Exposure to Hardware Security Modules (HSMs) and cryptographic key management. Soft Skills - Strong troubleshooting and analytical skills.
- Excellent organizational and documentation abilities.
- Ability to communicate effectively with both technical and non-technical stakeholders.
- Capability to work independently and within cross-functional teams.
- Solid attention to detail and commitment to security best practices.

📌 Delinea (Kolkata)
🏢 Tata Consultancy Services
📍 Kolkata