Track Manager - Active Directory Service Interfaces

Experience: 8 to 12 years

Location: Chennai, India

Skills: Microsoft Certificate Services, Public Key Infrastructure (PKI), certificate lifecycle management, Root CA, Intermediate CA, Certificate Revocation List (CRL), Online Certificate Status Protocol (OCSP), cryptographic key management, certificate-based authentication, enterprise security standards

Job Summary
The PKI L3 Engineer is responsible for advanced administration, maintenance, and engineering support of the enterprise Public Key Infrastructure (PKI) environment. The role focuses on ensuring the reliability, security, and compliance of certificate management services, including Root and Intermediate Certificate Authorities, certificate lifecycle operations, and revocation services. The engineer will manage complex PKI incidents, support cryptographic infrastructure operations, and ensure adherence to organizational security and regulatory standards.

Key Responsibilities
Provide advanced operational and engineering support for the enterprise PKI platform, ensuring the stability and availability of certificate services.
• Manage and maintain PKI infrastructure including Root Certificate Authorities and Intermediate/Subordinate Certificate Authorities.
• Oversee certificate lifecycle management including certificate issuance, renewal, revocation, and expiration monitoring.
• Manage certificate services for both internal certificate authorities and externally issued certificates.
• Maintain and manage Certificate Revocation List (CRL) and Online Certificate Status Protocol (OCSP) services to ensure accurate certificate validation.
• Troubleshoot complex issues related to certificate enrollment, certificate validation, and cryptographic service failures.
• Manage PKI policy updates and ensure alignment with organizational security and compliance frameworks.




• Perform operational key management activities including secure key rotation, key archival, and key backup processes.
• Ensure continuous monitoring of PKI infrastructure including certificate services, logging systems, and certificate authority health.
• Perform root cause analysis for critical PKI incidents and implement corrective or preventive measures.
• Manage certificate templates and support updates to certificate enrollment policies.
• Coordinate with security and infrastructure teams to support secure authentication mechanisms that rely on PKI services.
• Maintain and support certificate enrollment processes for enterprise users, services, and infrastructure components.
• Maintain PKI operational documentation including certificate policies, procedures, and operational runbooks.
• Support incident response activities related to certificate misuse, security incidents, or authentication failures involving certificates.
• Engage with external certificate providers or platform vendors for issue resolution when required.
• Ensure compliance with security and regulatory standards related to certificate management and cryptographic services.

Skill Requirements
Solid experience managing Microsoft Certificate Services or enterprise PKI infrastructure.
• Knowledge of certificate lifecycle management including enrollment, renewal, and revocation processes.
• Understanding of Root CA and Intermediate CA architecture and operational practices.
• Experience managing CRL and OCSP validation services.
• Familiarity with certificate templates, enrollment policies, and certificate distribution mechanisms.
• Understanding of cryptographic key management practices including key rotation and key archival.
• Experience troubleshooting certificate-based authentication and encryption issues.
• Knowledge of enterprise security standards related to PKI governance and compliance.
Other Requirements
8-12 years with certificate

📌 Track Manager Active Directory Service Interfaces (Chennai)
🏢 HCL Technologies
📍 Chennai