Job Title

L3 PKI Engineer / Senior PKI Support Engineer

Experience

10+ Years

Location

As per business requirement

Job Summary

We are seeking an experienced L3 PKI Engineer to support, maintain, troubleshoot, and enhance enterprise Public Key Infrastructure (PKI) environments. The ideal candidate will possess deep technical expertise in certificate lifecycle management, SSL/TLS technologies, Microsoft PKI, certificate automation, and enterprise security practices. The role involves production support, root cause analysis, automation, platform improvements, and collaboration with application, infrastructure, and security teams.

Key Responsibilities

PKI Operations & Support

- Provide L3 support for enterprise PKI environments.
- Manage Certificate Authorities (CA), Registration Authorities (RA), and certificate services.
- Support Public Key Infrastructure deployments and integrations.
- Monitor PKI services and ensure platform availability.
- Perform certificate issuance, renewal, revocation, and retirement activities.
- Manage certificate trust chains and ensure compliance with organizational security standards.

Certificate Lifecycle Management (CLM)
- Administer certificate lifecycle management platforms.
- Manage enrollment, renewal, replacement, and revocation processes.
- Track certificate expiration and perform proactive renewals.
- Maintain certificate inventory across enterprise environments.
- Support certificate discovery and remediation activities.

SSL/TLS Management
- Troubleshoot SSL/TLS certificate issues.
- Analyze certificate chains and trust relationships.
- Resolve HTTPS configuration issues.
- Investigate certificate validation failures.
- Support mutual TLS (mTLS) authentication implementations.
- Validate cipher suites and security configurations.

Microsoft PKI Administration




- Manage Microsoft Active Directory Certificate Services (AD CS).
- Configure certificate templates and enrollment policies.
- Administer Enterprise and Standalone Certificate Authorities.
- Handle CA backup and recovery procedures.
- Manage CRL and AIA distribution points.
- Administer OCSP responders and revocation infrastructure.

Certificate Automation
- Implement and maintain certificate automation solutions.
- Support ACME protocol-based certificate enrollment and renewals.
- Work with:
- Certbot
- Win-ACME
- Simple-ACME
- Let's Encrypt integrations
- Develop automation scripts using PowerShell.
- Reduce manual certificate management efforts through automation initiatives.

Incident & Problem Management
- Handle critical production incidents.
- Perform root cause analysis (RCA).
- Create corrective and preventive action plans.
- Participate in on-call support rotations.
- Maintain operational documentation and knowledge articles.

Security & Compliance
- Ensure PKI infrastructure complies with organizational security requirements.
- Support security audits and compliance assessments.
- Monitor certificate usage and policy adherence.
- Review PKI configurations against industry best practices.
- Participate in infrastructure hardening activities.

Technical Skills Required

Mandatory Skills

PKI Technologies

- Public Key Infrastructure (PKI)
- Certificate Lifecycle Management (CLM)
- Certificate Authorities (CA)
- Registration Authorities (RA)
- X.509 Certificates




- Digital Signatures
- Certificate Trust Chains

Microsoft Technologies
- Active Directory
- Active Directory Certificate Services (AD CS)
- Windows Server Administration
- Group Policy Management

Certificate Management
- SSL/TLS
- HTTPS
- Certificate Revocation Lists (CRL)
- Online Certificate Status Protocol (OCSP)
- Certificate Enrollment
- Certificate Templates

Automation
- PowerShell Scripting
- ACME Protocol
- Certificate Automation Tools

Security
- Cryptography fundamentals
- Identity and Access Management concepts
- Security Operations support
- Vulnerability remediation

Preferred Skills Tools & Platforms
- ServiceNow
- CMDB integrations
- Monitoring and alerting platforms
- Enterprise Certificate Management solutions

Cloud & Modern Infrastructure
- Azure PKI integrations
- AWS Certificate Manager
- Cloud-native certificate management
- Container security certificates

DevOps
- Git
- CI/CD integrations
- Infrastructure automation

Troubleshooting Expertise Required Candidate should be capable of troubleshooting:

Certificate Issues

- Expired certificates
- Certificate chain failures
- Trust relationship issues
- Enrollment failures
- Revocation-related errors

Application Security Issues
- SSL handshake failures
- HTTPS errors
- Browser trust warnings
- Mutual TLS authentication failures

Microsoft PKI Issues
- CA service failures
- Template permission problems
- Auto-enrollment failures
- CRL publication issues
- OCSP validation failures

Educational Qualifications
- Bachelor's Degree in Computer Science, Information Technology, Cyber Security, or related field.
- Relevant certifications preferred:
- Microsoft Certifications
- Security+
- CISSP
- Certified PKI Skilled
- Cybersecurity Certifications

📌 PKI Engineer / Senior PKI Support Engineer - 10+ Years - Immediate joiner (Hyderabad)
🏢 Tek Grove
📍 Hyderabad