Job DescriptionPosition: Microsoft Cryptography/PKI Architect or Consultant.

NJob Description:

NJob Title: Microsoft PKI Architect or Consultant

NLocation: Noida Preferred. But open for other location.

NExperience: 13 – 16 Years

NJob Summary:

NWe are looking for a highly skilled Cyber Security Architect / Consultant with deep expertise in Public Key Infrastructure (PKI), Certificate Lifecycle Management (CLM), cryptographic technologies, Post-Quantum Cryptography (PQC), and crypto agility. The role involves designing, implementing, and modernizing enterprise cryptographic environments while ensuring scalability, compliance, and future readiness against quantum threats.

NKey Responsibilities:

NArchitecture & Strategy

N

n
- Design and implement enterprise PKI and CLM solutions (on-premises, cloud, and hybrid).
N
- Define and drive cryptographic architecture, standards, and governance.
N
- Develop crypto agility roadmap and support transition to quantum-safe cryptography.
N
- Perform current-state assessment, gap analysis, and target-state architecture for cryptographic environments.
N
- Provide consulting and advisory to application, cloud, network, and infrastructure teams on secure cryptographic integration.
N

nImplementation & Operations

N

n
- Lead deployment and migration of PKI hierarchies, HSM integration, key management, and certificate automation.
N
- Implement certificate discovery, inventory, and lifecycle automation.
N
- Support secure key management practices across multi-cloud and on-prem platforms.
N
- Integrate PKI with IAM,DevOps,



containers, service mesh, and Zero Trust architectures.
N

nPost-Quantum Readiness

N

n
- Assess quantum risk exposure across enterprise systems.
N
- Evaluate and recommend PQC algorithms and hybrid cryptographic models.
N
- Define and execute quantum-secure migration strategy.
N

nRisk, Compliance &Governance;

N

n
- Ensure compliancewith NIST, ETSI, ISO 27001, PCI-DSS, and regulatory requirements.
N
- Conduct cryptographic risk assessments and threat modeling.
N
- Define policies, standards, and best practices for enterprise cryptography.
N

nStakeholder & Consulting

N

n
- Act as SME for cryptography and PKI in client engagements.
N
- Prepare and deliver technical presentations, architecture documents, and executive briefings.
N
- Collaborate with cross-functional teams and provide technical leadership.
N

nRequired TechnicalSkills

N

n
- Strong hands-on experience in PKI design, implementation, and migration.
N
- Expertise in Certificate Lifecycle Management (CLM) platforms.
N
- Deep understanding of:
N
- X.509 certificates, CRL, OCSP
N
- Key management and HSMs
N
- TLS/SSL, mTLS, code signing, document signing
N




- SSH key management
n
- Knowledge of crypto discovery and automation tools.
N
- Strong understanding ofPost-Quantum Cryptography (PQC) and crypto agility frameworks.
N
- Experience in cloud PKIand key management (AWS, Azure, GCP).
N
- Scripting/automation using PowerShell, Python, Bash, or APIs.
N

nConsulting & Communication Skills

N

n
- Excellent client-facing and stakeholder management skills.
N
- Ability to translate business requirements into secure cryptographic architectures.
N
- Strong documentation, presentation, and solution design capabilities.
N

nPreferred Qualifications

N

n
- Experience with Zero Trust and machine identity management.
N
- Knowledge of DevSecOps and certificate automation in CI/CD pipelines.
N
- Familiarity with quantum risk assessment methodologies.
N
- Relevant certifications(one or more):
N
- CISSP / CCSP
n
- CISM
N
- TOGAF
n
- VendorPKI certifications
N
- Bachelor's degree in computer science, Information Technology, or a related field.
N
- Proven experience as a PKI Architect or Consultant with a focus on strategic design.
N
- In-depth knowledge of cryptographic algorithms, digital certificates, and security protocols.
N
- Experience in conducting PKI assessments and providing actionable recommendations.
N
- Strong analytical and problem-solving skills.
N
- Excellent communicationand client-facing skills.
N
- Ability to work independently and collaboratively with client teams.
N

📌 Public Key Infrastructure (Faridabad)
🏢 HCLTech
📍 Faridabad