Position Description:

The PKI Engineer is responsible for designing, operating, and enhancing the enterprise Public Key Infrastructure (PKI) and certificate management services. This role ensures secure authentication, encryption, and certificate lifecycle management across enterprise systems, supporting regulatory compliance and operational stability.
This position plays a critical role in scaling PKI services, driving automation, and reducing operational risk associated with certificate expiration, trust store management, and cryptographic operations.
YOUR RESPONSIBILITIES IN THIS ROLE: Eastern Time Zone (ET),1. PKI Infrastructure & Operations (Onprem and Cloud (AWS & Azure )

. Maintain and operate PKI platforms, including Certificate Authorities (CAs), HSMs, and certificate management systems
. Ensure availability, resiliency, and patching of PKI infrastructure
. Support certificate issuance, renewal, revocation, and lifecycle management
Certificate Lifecycle Management

. Manage large scale certificate settings across applications and infrastructure
.



Ensure timely renewal and replacement of certificates
. Support trust store management and certificate chain integrity
Automation & Integration

. Build and implement automation for certificate lifecycle management
. Integrate PKI services with enterprise platforms (CI/CD pipelines, cloud services, applications)
. Deploy and operationalize tools such as connectors and automation pipelines
Governance, Standards & Policy Enforcement

. Enforce security policies related to certificate usage and cryptography
. Define and maintain standards for certificate issuance, validity, and usage
. Support compliance with regulatory frameworks (e.g., NIST, CMMC, PCI, TSA directives)
Cross Team Collaboration

. Partner with application and infrastructure teams to enable certificate automation
. Provide guidance and supporting tooling while ensuring explicit ownership boundaries
. Assist teams with onboarding to P

📌 Pki Senior Security Engineer Bengaluru
🏢 CGI
📍 Bengaluru