Senior Administrator - Thycotic Privilege Manager, Azure Active Directory

Pune, MaharashtraBengaluru, Karnataka

Job Summary

Years of Experience

- 3-6 years of experience in Public Key Infrastructure (PKI), Certificate Management, Cybersecurity, IAM, PAM, or Infrastructure Security.

General Description

- Provide day-to-day administration, monitoring, and operational support for enterprise PKI and Venafi certificate management solutions, ensuring secure management of digital certificates and cryptographic assets.
- Support certificate lifecycle management activities including discovery, issuance, renewal, revocation, replacement, and compliance reporting across enterprise environments.
- Collaborate with infrastructure, security, application, network, and cloud teams to support PKI integrations, certificate onboarding, troubleshooting, and process improvements.
- Perform incident resolution, root cause analysis, documentation, and operational support activities to maintain the security, availability, and compliance of PKI services.

Key Responsibilities

Years of Experience

- 3-6 years of experience in Public Key Infrastructure (PKI), Certificate Management, Cybersecurity, IAM, PAM, or Infrastructure Security.

General Description

- Provide day-to-day administration, monitoring, and operational support for enterprise PKI and Venafi certificate management solutions, ensuring secure management of digital certificates and cryptographic assets.
- Support certificate lifecycle management activities including discovery, issuance, renewal, revocation, replacement, and compliance reporting across enterprise environments.
- Collaborate with infrastructure, security, application, network, and cloud teams to support PKI integrations, certificate onboarding,



troubleshooting, and process improvements.
- Perform incident resolution, root cause analysis, documentation, and operational support activities to maintain the security, availability, and compliance of PKI services.

Skill Requirements

Technical Requirements

- Hands-on experience with Venafi Trust Protection Platform (TPP) and/or Venafi TLS Protect, including certificate discovery, lifecycle management, and operational support.
- Strong understanding of PKI concepts including:
- Digital Certificates
- Certificate Authorities (CA)
- Registration Authorities (RA)
- Certificate Signing Requests (CSR)
- Key Generation
- Certificate Revocation Lists (CRL)
- Online Certificate Status Protocol (OCSP)

- Experience managing the complete certificate lifecycle, including certificate issuance, renewal, revocation, replacement, and expiration management.
- Experience onboarding applications, servers, load balancers, network devices, and cloud services into Venafi-managed certificate ecosystems.
- Knowledge of cryptographic standards and algorithms including RSA, ECC, SHA-2, PKCS, TLS/SSL, and X.509 certificates.
- Experience supporting enterprise Certificate Authorities such as:

- Microsoft ADCS
- DigiCert
- Entrust
- Sectigo
- GlobalSign
- Other public and private CAs

- Experience managing and troubleshooting SSL/TLS certificates across:

- Windows Servers




- Linux/Unix Servers
- Web Servers (IIS, Apache, NGINX)
- Application Servers
- Network Devices

- Familiarity with certificate deployment and automation using: PowerShell, Python, Shell Scripting, REST APIs.
- Experience integrating Venafi with enterprise platforms such as: Active Directory, LDAP, SIEM Solutions, ITSM Platforms, Cloud Platforms, DevOps Toolchains

Working knowledge of cloud environments including AWS, Azure, and GCP, with understanding of cloud-native certificate and key management services. Experience supporting certificate management for containers and modern platforms such as Docker, Kubernetes, OpenShift, and CI/CD pipelines.

Understanding of Hardware Security Modules (HSMs), key protection mechanisms, and certificate security best practices.

- Knowledge of security and compliance requirements including NIST, ISO 27001, PCI-DSS, SOX, HIPAA, and GDPR.
- Ability to monitor certificate health, identify expiring certificates, perform risk assessments, and support remediation activities.
- Strong troubleshooting, analytical, and problem-solving skills with the ability to provide L2 operational support and incident resolution for PKI environments.

Soft Skills

- Valuable communication for cross-functional collaboration and readiness to participate in on-call rotation.
- Ability to present solutions to clients remotely and in person if needed.
- Good documentation skills that will enable creation of design documents for the technical solutions proposed.

Certifications (Good to Have)

- Venafi Security Administrator (VSA20)

Educational Qualifications

- University degree in IT or/and IT Security

Other Requirements

📌 Senior Administrator - Thycotic Privilege Manager, Azure Active Directory (Pune)
🏢 HCLTech
📍 Pune