Role : PKI Engineer

Domain: CyberSecurity | CyberSec Platform | PKI

Experience : 3-6 Years

We are looking for a PKI / Certificate Management / KMS Engineer with 3–5 years of experience in enterprise Public Key Infrastructure, certificate lifecycle management,

encryption, and key management. The candidate will be responsible for managing enterprise PKI environments, digital certificates, Certificate Authorities, and encryption keys while supporting automation of certificate and key-management processes.

The role requires solid troubleshooting skills and hands-on experience with PKI technologies, certificate lifecycle management, KMS platforms, APIs, and automation.

Roles & Responsibilities

- Manage and support KCS / Key & Certificate Services, including certificates in
- lifecycle, key management, and related security services.
- Perform certificate issuance, renewal, revocation, expiry monitoring, and

troubleshooting.wrapping/unwrapping, and key lifecycle management.PKCS#11.certificate operations, reporting, and KMS activities.issues.Technical Skills Requiredlifecycle, client/server certificates.certificate discovery, renewal, revocation, policy and lifecycle management.access control, wrapping/unwrapping, BYOK.encryption, HSM concepts.Preferred SkillsKMS platforms.platforms.
- Support PKI, CA, CRL, OCSP, TLS/SSL, and certificate-chain related activities.
- Manage KMS activities including key generation, rotation,



access control,
- Integrate KCS/KMS platforms with applications using REST APIs, KMIP, and
- Develop scripts and automation using Python/PowerShell to automate monitoring,
- Troubleshoot security, cryptographic, certificate, API, and connectivity-related
- Support incident management, RCA, Documentation and continuous improvement.
- PKI & Certificate Management: X.509, CA, CSR, CRL, OCSP, TLS/SSL, certificate
- KCS(Key and certificate service): Enterprise certificate and key management,
- KMS(Key Management service): Key lifecycle management, AES, RSA, key rotation,
- Cryptography: Symmetric/asymmetric cryptography, hashing, digital signatures,
- Development: Python/PowerShell, REST APIs, JSON, scripting and automation.
- Security: IAM, secure communication, basic network/security concepts.
- Tools/Interfaces: KMIP, PKCS#11,RESTAPI, OpenSSL, curl, ServiceNow.
- Hands-on experience with Fortanix DSM, AWS KMS, Azure Key Vault or similar
- Experience with DigiCert, Keyfactor, Venafi, Microsoft AD CS, or other CLM/PKI
- Knowledge of HSMs, Thales Luna, ACME, Terraform, Git, and cloud security.
- Experience automating PKI/KMS operations through REST APIs and Python.
- Understanding of DevSecOps and CI/CD security integration.

Pay: ₹400,000.00 - ₹900,000.00 per year

Benefits

- Provident Fund

Work Location: In person

📌 PKI Engineer (Bengaluru)
🏢 Amradnet india
📍 Bengaluru