Job Title L3 PKI Engineer / Senior PKI Support Engineer Experience 10+ Years Location As per business requirement Job Summary We are seeking an experienced L3 PKI Engineer to support, maintain, troubleshoot, and enhance enterprise Public Key Infrastructure (PKI) environments. The ideal candidate will possess deep technical expertise in certificate lifecycle management, SSL/TLS technologies, Microsoft PKI, certificate automation, and enterprise security practices. The role involves production support, root cause analysis, automation, platform improvements, and collaboration with application, infrastructure, and security teams.

Key Responsibilities
PKI Operations & Support
• Provide L3 support for enterprise PKI environments.
• Manage Certificate Authorities (CA), Registration Authorities (RA), and certificate services.
• Support Public Key Infrastructure deployments and integrations.
• Monitor PKI services and ensure platform availability.
• Perform certificate issuance, renewal, revocation, and retirement activities.
• Manage certificate trust chains and ensure compliance with organizational security standards. Certificate Lifecycle Management (CLM)
• Administer certificate lifecycle management platforms.
• Manage enrollment, renewal, replacement, and revocation processes.
• Track certificate expiration and perform proactive renewals.
• Maintain certificate inventory across enterprise environments.
• Support certificate discovery and remediation activities. SSL/TLS Management
• Troubleshoot SSL/TLS certificate issues.
• Analyze certificate chains and trust relationships.
• Resolve HTTPS configuration issues.
• Investigate certificate validation failures.
• Support mutual TLS (mTLS) authentication implementations.
• Validate cipher suites and security configurations. Microsoft PKI Administration
• Manage Microsoft Active Directory Certificate Services (AD CS).




• Configure certificate templates and enrollment policies.
• Administer Enterprise and Standalone Certificate Authorities.
• Handle CA backup and recovery procedures.
• Manage CRL and AIA distribution points.
• Administer OCSP responders and revocation infrastructure. Certificate Automation
• Implement and maintain certificate automation solutions.
• Support ACME protocol-based certificate enrollment and renewals.
• Work with:
• Certbot
• Win-ACME
• Simple-ACME
• Let's Encrypt integrations
• Develop automation scripts using PowerShell.
• Reduce manual certificate management efforts through automation initiatives. Incident & Problem Management
• Handle critical production incidents.
• Perform root cause analysis (RCA).
• Create corrective and preventive action plans.
• Participate in on-call support rotations.
• Maintain operational documentation and knowledge articles. Security & Compliance
• Ensure PKI infrastructure complies with organizational security requirements.
• Support security audits and compliance assessments.
• Monitor certificate usage and policy adherence.
• Review PKI configurations against industry best practices.
• Participate in infrastructure hardening activities. Technical Skills Required Mandatory Skills PKI Technologies
• Public Key Infrastructure (PKI)
• Certificate Lifecycle Management (CLM)
• Certificate Authorities (CA)
• Registration Authorities (RA)
• X.509 Certificates
• Digital Signatures




• Certificate Trust Chains Microsoft Technologies
• Active Directory
• Active Directory Certificate Services (AD CS)
• Windows Server Administration
• Group Policy Management Certificate Management
• SSL/TLS
• HTTPS
• Certificate Revocation Lists (CRL)
• Online Certificate Status Protocol (OCSP)
• Certificate Enrollment
• Certificate Templates Automation
• PowerShell Scripting
• ACME Protocol
• Certificate Automation Tools Security
• Cryptography fundamentals
• Identity and Access Management concepts
• Security Operations support
• Vulnerability remediation Preferred Skills Tools & Platforms
• ServiceNow
• CMDB integrations
• Monitoring and alerting platforms
• Enterprise Certificate Management solutions Cloud & Contemporary Infrastructure
• Azure PKI integrations
• AWS Certificate Manager
• Cloud-native certificate management
• Container security certificates DevOps
• Git
• CI/CD integrations
• Infrastructure automation Troubleshooting Expertise Required Candidate should be capable of troubleshooting: Certificate Issues
• Expired certificates
• Certificate chain failures
• Trust relationship issues
• Enrollment failures
• Revocation-related errors Application Security Issues
• SSL handshake failures
• HTTPS errors
• Browser trust warnings
• Mutual TLS authentication failures Microsoft PKI Issues
• CA service failures
• Template permission problems
• Auto-enrollment failures
• CRL publication issues
• OCSP validation failures Educational Qualifications
• Bachelor's Degree in Computer Science, Information Technology, Cyber Security, or related field.
• Relevant certifications preferred:
• Microsoft Certifications
• Security+
• CISSP
• Certified PKI Professional
• Cybersecurity Certifications

📌 PKI Engineer (Hyderabad)
🏢 Tek Grove
📍 Hyderabad