PKI Engineer

Summary

We are seeking a highly skilled PKI Engineer to lead the design, implementation, and management of our public key infrastructure across diverse cloud and on-premises environments. In this critical role, you will be responsible for securing digital identities, managing encryption keys, and ensuring robust certificate lifecycle management to protect sensitive data and communications. This position serves as the backbone of our security architecture, integrating advanced cryptographic standards with modern DevSecOps practices to maintain the integrity and confidentiality of our IT Services ecosystem.

Responsibilities

- Architect and maintain enterprise-grade PKI solutions utilizing platforms such as Fortanix DSM, AWS KMS, Azure Key Vault, DigiCert, Keyfactor, Venafi, and Microsoft Active Directory Certificate Services (AD CS).

- Manage Hardware Security Modules (HSM) including Thales Luna, ensuring secure key generation, storage, and cryptographic operations in compliance with KMIP and PKCS#11 standards.

- Automate certificate provisioning and lifecycle workflows using Terraform and ACME protocols to streamline operations and reduce manual intervention.

- Develop and maintain Python and PowerShell scripts to interact with REST APIs, enabling seamless integration between PKI systems and broader IT infrastructure.

- Implement and enforce security policies related to digital signatures, cryptography,



and certificate validation across hybrid cloud environments.

- Collaborate with DevSecOps teams to embed security controls into CI/CD pipelines, ensuring that cryptographic best practices are applied throughout the software development lifecycle.

- Monitor and audit certificate usage, renewal processes, and revocation lists to mitigate risks associated with expired or compromised credentials.

Requirements

Requirements:

- Possess 3 to 6 years of qualified experience in Information Technology, specifically within the realm of Public Key Infrastructure and Identity and Access Management (IAM).

- Demonstrate proven expertise with leading PKI and key management tools, including Fortanix DSM, AWS KMS, Azure Key Vault, DigiCert, Keyfactor, Venafi, Microsoft AD CS, and Thales Luna HSM.

- Show strong proficiency in automation and infrastructure-as-code using Terraform, along with hands-on experience in ACME protocols and Git version control.

- Exhibit solid knowledge of security integration patterns, including DevSecOps methodologies, CI/CD security, and the implementation of RESTful APIs.

- Be well-versed in core cryptographic standards and libraries such as KMIP, PKCS#11, OpenSSL, and JSON, with a deep understanding of digital signatures and HSM concepts.

- Display advanced scripting capabilities in Python and PowerShell for automating complex security tasks and managing system configurations.

📌 PKI Engineer (Bengaluru)
🏢 Vrinda International
📍 Bengaluru