Role & responsibilities :

Key Responsibilities

- Execute end-to-end certificate lifecycle management activities issuance, renewal, deployment, and revocation across enterprise environments.

- Perform certificate migration, deployment, and validation across platforms including IIS, Linux, Azure, F5, and Java Keystore (JKS).

- Support certificate issuance, renewal, and deployment using DigiCert and/or Venafi.

- Operate and support core PKI components Certificate Authorities (CA), Registration Authorities (RA), and Hardware Security Modules (HSM).

- Conduct pre-migration validation, testing, and rollback procedures to ensure protected cutovers.

- Assist in application onboarding and monitoring setup using tools such as SolarWinds (good to have)

- Support proof-of-concept (PoC) activities (e.g., Azure App Proxy, JKS validation).

- Troubleshoot platform and infrastructure issues (e.g., WinRM, certificate installation failures) and resolve complex PKI-related problems.

- Develop and maintain runbooks and operational documentation.

- Develop scripts and automation solutions (PowerShell, Bash) to improve operational efficiency and reduce manual effort.





- Assist in integrating CLM processes with monitoring and SIEM platforms.

- Collaborate with application owners and the security operations team for testing, validation, and cutover activities, and to enhance the overall security posture.

- Solid understanding of server set up (windows, linux) and network connectivity.

Core (Must-Have)

- Strong hands-on experience in certificate deployment and troubleshooting.

- Solid grounding in SSL/TLS and PKI fundamentals, including X.509 certificates, certificate chains, and common cryptographic protocols, standards, and algorithms.

- Working knowledge of core PKI components: Certificate Authorities (CA), Registration Authorities (RA), and Hardware Security Modules (HSM).

- Hands-on experience across multiple platforms — Windows and Linux server environments and cloud environments.

- Exposure to certificate / infrastructure monitoring tools such as SolarWinds.

- Strong analytical and troubleshooting skills to diagnose and resolve complex PKI- and certificate-related issues.

📌 CLM PKI Senior Associate (Bengaluru)
🏢 PwC
📍 Bengaluru