MS PKI Certificate Lifecycle Management (CLM) Architect

Company: A leading global IT services and consulting MNC

Locations: Pune / Hyderabad / Bangalore / Chennai / Mumbai / Kolkata

Overall Experience: 7–14 Years

Core PKI Experience: Minimum 8–9 years of hands-on PKI experience, as specified in the requirement

Open Positions: 1

Notice Period: Immediate to 15 Days preferred

Job Summary

We are seeking an experienced MS PKI / Certificate Lifecycle Management (CLM) Architect to lead the design, implementation, and management of enterprise Public Key Infrastructure and certificate lifecycle solutions.

The candidate should have strong hands-on experience in Microsoft PKI, Active Directory Certificate Services (AD CS), certificate lifecycle management platforms, and enterprise certificate automation.

Mandatory Skills

- Robust hands-on experience in PKI and certificate lifecycle management.
- Mandatory experience implementing Microsoft PKI / Active Directory Certificate Services (AD CS).
- Experience with at least one CLM or certificate management platform:
- AppViewX CERT+
- CyberArk Certificate Manager
- Venafi Trust Protection Platform
- DigiCert
- Keyfactor
- Experience managing certificate discovery, issuance, renewal, revocation, deployment, and monitoring.
- Strong understanding of PKI architecture, certificate governance, cryptographic standards, trust models, and private key protection.
- Experience integrating CLM platforms with enterprise systems and public Certificate Authorities.
- Experience in certificate automation, scripting, and workflow development.

Preferred Skills
- Microsoft PKI / AD CS administration and implementation.
- Knowledge of DigiCert, Sectigo, Entrust, and GlobalSign.
- Familiarity with ACME, EST, and SCEP protocols.




- Cloud certificate management using Azure Key Vault, AWS Certificate Manager, or Google CAS.
- PowerShell, REST APIs, and automation.
- ServiceNow integration.
- PKI architecture, certificate governance, and security compliance.

Key Responsibilities
- Lead enterprise certificate lifecycle operations, including discovery, issuance, renewal, revocation, deployment, and monitoring.
- Design, implement, and manage CLM solutions using AppViewX, CyberArk Certificate Manager, Venafi, Keyfactor, and Microsoft PKI.
- Integrate certificate management platforms with AD CS, public CAs, cloud platforms, ITSM solutions, load balancers, web servers, and DevOps ecosystems.
- Develop automated certificate management workflows using platform-native tools, PowerShell, REST APIs, and scripting.
- Maintain certificate inventories, monitor expiration risks, and establish certificate governance and compliance controls.
- Define security policies for certificate issuance, cryptographic standards, key management, and private key protection.
- Establish dashboards, reporting, monitoring, and audit processes for certificate health and operational performance.
- Support certificate onboarding and automation across servers, applications, cloud services, and container platforms.
- Collaborate with Security, Infrastructure, Cloud, DevOps, and Application teams.
- Mentor team members on PKI, CLM platforms, automation, and best practices.
- Drive continuous improvement in certificate visibility, automation, and operational efficiency.

Ideal Candidate A hands-on PKI professional with proven AD CS implementation experience, strong enterprise certificate lifecycle management expertise, and the ability to design and automate secure certificate management solutions.

📌 MS PKI Certificate Lifecycle Management (CLM) Architect (Bengaluru)
🏢 CSbusinesmgmt.in
📍 Bengaluru