Position: Microsoft Cryptography/PKI Architect or Consultant.

Job Title: Microsoft PKI Architect or Consultant

Location: Noida Preferred. But open for other location.

Experience: 13 – 16 Years

Job Summary

We are looking for a highly skilled Cyber Security Architect / Consultant with deep expertise in Public Key Infrastructure (PKI), Certificate Lifecycle Management (CLM), cryptographic technologies, Post-Quantum Cryptography (PQC), and crypto agility. The role involves designing, implementing, and modernizing enterprise cryptographic environments while ensuring scalability, compliance, and future readiness against quantum threats.

Key Responsibilities

Architecture & Strategy

- Design and implement enterprise PKI and CLM solutions (on-premises, cloud, and hybrid). - Define and drive cryptographic architecture, standards, and governance. - Develop crypto agility roadmap and support transition to quantum-secure cryptography. - Perform current-state assessment, gap analysis, and target-state architecture for cryptographic environments. - Provide consulting and advisory to application, cloud, network, and infrastructure teams on secure cryptographic integration.

Implementation & Operations

- Lead deployment and migration of PKI hierarchies, HSM integration, key management, and certificate automation. - Implement certificate discovery, inventory, and lifecycle automation. - Support secure key management practices across multi-cloud and on-prem platforms. - Integrate PKI with IAM, DevOps, containers, service mesh, and Zero Trust architectures.

Post-Quantum Readiness

- Assess quantum risk exposure across enterprise systems. - Evaluate and recommend PQC algorithms and hybrid cryptographic models. - Define and execute quantum-safe migration strategy.

Risk, Compliance & Governance

- Ensure compliance with NIST, ETSI, ISO 27001, PCI-DSS, and regulatory requirements. - Conduct cryptographic risk assessments and threat modeling. - Define policies, standards,



and best practices for enterprise cryptography.

Stakeholder & Consulting

- Act as SME for cryptography and PKI in client engagements. - Prepare and deliver technical presentations, architecture documents, and executive briefings. - Collaborate with cross-functional teams and provide technical leadership.

Required Technical Skills

- Strong hands-on experience in PKI design, implementation, and migration. - Expertise in Certificate Lifecycle Management (CLM) platforms. - Deep understanding of: - X.509 certificates, CRL, OCSP - Key management and HSMs - TLS/SSL, mTLS, code signing, document signing - SSH key management - Knowledge of crypto discovery and automation tools. - Strong understanding of Post-Quantum Cryptography (PQC) and crypto agility frameworks. - Experience in cloud PKI and key management (AWS, Azure, GCP). - Scripting/automation using PowerShell, Python, Bash, or APIs.

Consulting & Communication Skills

- Excellent client-facing and stakeholder management skills. - Ability to translate business requirements into secure cryptographic architectures. - Strong documentation, presentation, and solution design capabilities.

Preferred Qualifications

- Experience with Zero Trust and machine identity management. - Knowledge of DevSecOps and certificate automation in CI/CD pipelines. - Familiarity with quantum risk assessment methodologies. - Relevant certifications (one or more): - CISSP / CCSP - CISM - TOGAF - Vendor PKI certifications
- Bachelor's degree in computer science, Information Technology, or a related field. - Proven experience as a PKI Architect or Consultant with a focus on strategic design. - In-depth knowledge of cryptographic algorithms, digital certificates, and security protocols. - Experience in conducting PKI assessments and providing actionable recommendations. - Strong analytical and problem-solving skills. - Excellent communication and client-facing skills. - Ability to work independently and collaboratively with client teams.

📌 Public Key Infrastructure (Noida)
🏢 HCLTech
📍 Noida