Role & responsibilities

PKI & Certificate Management
Design and manage enterprise PKI solutions, including:
Internal Certificate Authorities (CAs)
Integration with public CAs
Oversee full certificate lifecycle:
Request, issuance, renewal, revocation, and retirement
Implement and maintain automation for certificate lifecycle management (e.g., ACME, APIs)
Integrate catalog items within ITSM platforms
Understand certificate renewal process/auto renewal
Deploy and manage:
SSL/TLS certificates for web apps, APIs, and infrastructure
Mutual TLS (mTLS) where applicable
Ensure compliance with organizational security policies and industry standards

Cloudflare Integration
Administer and optimize Cloudflare services, including:
DNS hosting and record management
SSL/TLS configuration (Full/Strict modes, edge certificates)
CDN and performance tuning
Configure and maintain:
Web Application Firewall (WAF)
Zero Trust / access controls (where applicable)
Support hybrid DNS architectures across on-prem and Cloudflare edge

Automation & Engineering
Develop automation for DNS and certificate management:
Infrastructure as Code (IaC) (e.g., Terraform, ARM, etc.)
API-based integrations (Infoblox, Cloudflare, DigiCert)




Build monitoring and alerting for:
DNS resolution health
Certificate expiration
Security anomalies
Standardize deployment patterns and operational runbooks

Preferred candidate profile
8+ years of hands-on experience in:
DNS engineering (enterprise-scale)
PKI / certificate lifecycle management
Solid experience with:
Infoblox (DDI platform administration, NIOS-X)
DigiCert (certificate issuance, automation, APIs)
Cloudflare (DNS, CDN, SSL/TLS, WAF)
Domain registrar management experience
Deep understanding of:
DNS protocols and architecture
TCP/IP networking fundamentals
SSL/TLS handshake and certificate chains
Experience troubleshooting:
DNS resolution failures
Certificate trust and validation issues
Scripting/automation experience (PowerShell, Python, or similar)

Preferred Qualifications
Experience with:
Hybrid cloud settings (Azure/AWS)
Microsoft Entra ID / Active Directory integration
Familiarity with:
Certificate automation tooling
Zero Trust architecture
Experience implementing DNS security controls (DNSSEC, RPZ)
Infrastructure-as-Code experience (Terraform preferred)

📌 Principal It Technologist Pki Pune
🏢 Kornferry
📍 Pune