Role & responsibilities :

1. Solution Design & Architecture

- Work with customers to understand their PKI, certificate management, infrastructure, security, and operational requirements.
- Design scalable and secure PKI and Certificate Lifecycle Management solutions.
- Develop solution architectures covering certificate authorities, registration authorities, certificate stores, HSMs, integrations, and automation.
- Conduct architecture reviews and technical design sessions with customer stakeholders.
- Translate business and technical requirements into practical implementation plans.

2. CLM & PKI Implementation

- Lead end-to-end Professional Services engagements from design through implementation and operational handoff.
- Deploy, configure, and integrate CLM and PKI solutions within enterprise environments.
- Implement and manage X.509 certificates, multi-tier CA architectures, RAs, CRLs, OCSP, and HSM integrations.
- Configure certificate issuance, renewal, revocation, and lifecycle management processes.
- Troubleshoot complex PKI, certificate, authentication, and integration issues in production environments.

3. Enterprise Infrastructure & Identity Integration

- Integrate CLM/PKI solutions with enterprise infrastructure and identity platforms.
- Work with Microsoft Active Directory, AD CS, ADFS, and LDAP environments.
- Support integrations across Windows Server and Linux/Unix environments.
- Work with enterprise networking and security infrastructure to ensure reliable certificate deployment and management.
- Troubleshoot certificate-related issues across applications, infrastructure, identity, and network environments.

4. Cloud & Hybrid Environments

- Implement and support CLM/PKI solutions across AWS, Microsoft Azure, and Google Cloud Platform (GCP).
- Work across hybrid and self-hosted enterprise environments.
- Support deployments involving VMware and Hyper-V environments.
- Design and implement solutions considering high availability, resilience, and disaster recovery requirements.
- Help customers establish consistent certificate management practices across on-premises and cloud environments.

5. Certificate Automation & Optimization

- Identify opportunities to automate certificate issuance, renewal, deployment, and revocation.
- Help customers reduce manual certificate management and minimize certificate-related service disruptions.
- Integrate CLM capabilities with enterprise applications, infrastructure, identity systems, and security platforms.
- Optimize certificate lifecycle processes based on customer requirements and operational best practices.
- Support the expansion of automation capabilities across enterprise environments.

6. Customer Consulting & Workshops

- Lead technical discovery sessions, architecture workshops, design reviews, and implementation meetings.
- Engage with security, infrastructure, networking, cloud, application, and identity teams.
- Explain complex PKI and certificate concepts to both technical and business stakeholders.
- Provide clear, actionable recommendations aligned with customer objectives.




- Serve as a trusted technical advisor throughout the engagement.

7. Testing, Troubleshooting & Production Readiness

- Develop and execute implementation and validation plans.
- Troubleshoot complex technical issues across PKI, certificates, infrastructure, applications, and integrations.
- Support production deployments and transition activities.
- Validate solution functionality, security, scalability, and operational readiness.
- Identify implementation gaps and recommend corrective actions.

8. Documentation & Knowledge Transfer

- Create technical documentation including:

- Solution architecture

- Implementation designs

- Configuration guides

- Integration documentation

- Operational procedures

- Troubleshooting guides
- As-built documentation
- Conduct knowledge transfer and enablement sessions for customer teams.
- Ensure customers are able to operate and maintain the deployed solution effectively after project completion.

9. Engagement & Stakeholder Management

- Manage multiple customer engagements while maintaining delivery quality and timelines.
- Coordinate with customers, partners, internal engineering/product teams, and other stakeholders.
- Proactively identify technical, delivery, and dependency risks.
- Ensure effective communication throughout the engagement lifecycle.
- Support successful operational handoff at the conclusion of Professional Services engagements.

Required Qualifications & Experience Education & Professional Background

- Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent practical experience.
- 5+ years of experience in technical consulting, Professional Services, managed services, enterprise software delivery, cybersecurity, or related technical domains.
- Demonstrated experience delivering customer-facing technical projects from solution design through implementation, testing, and knowledge transfer.

PKI & Certificate Lifecycle Management Strong hands-on expertise in:

- Public Key Infrastructure (PKI)
- Certificate Lifecycle Management (CLM)
- X.509 certificates
- Certificate Authorities and multi-tier CA architectures
- Registration Authorities (RA)
- Certificate revocation
- CRL and OCSP
- Hardware Security Modules (HSM)
- Cryptography and modern cryptographic practices
- Certificate-based authentication and trust relationships

Infrastructure & Identity

- Solid understanding of enterprise networking.
- Hands-on experience with Windows Server and Linux/Unix environments.

- Experience with

- Active Directory

- Microsoft AD CS

- ADFS

- LDAP




- Ability to troubleshoot certificate and PKI issues across enterprise infrastructure.

Cloud & Virtualization

- Experience with one or more major cloud platforms, preferably:

- AWS

- Microsoft Azure

- Google Cloud Platform (GCP)
- Understanding of hybrid and self-hosted environments.
- Familiarity with VMware and Hyper-V.
- Understanding of high-availability and disaster-recovery architectures.

Consulting & Customer-Facing Skills

- Proven experience leading customer-facing technical engagements.
- Ability to conduct technical workshops and architecture sessions.
- Solid troubleshooting and problem-solving capabilities.
- Excellent written and verbal communication skills.
- Ability to translate complex technical concepts into clear recommendations.
- Ability to work effectively with both technical and business stakeholders.
- Strong ownership of customer outcomes and project delivery.

Preferred Qualifications

- Experience with TLS/SSL-enabled technologies such as:
- F5

- Citrix NetScaler

- IIS

- Apache HTTP Server

- Oracle WebLogic

- IBM WebSphere
- Experience with Microsoft SQL Server, including installation, configuration, and maintenance.
- Experience deploying enterprise software within customer environments, particularly for a software vendor.
- Previous experience in Professional Services or technical consulting.
- Experience with certificate automation and management standards such as ACME.
- Industry-recognized security certifications such as:

- CISSP

- GIAC
- Other relevant security certifications.

Preferred candidate profile

- PKI & Certificate Lifecycle Management: PKI, CLM, X.509 certificates, Certificate Authorities, Registration Authorities, CRL, OCSP, and HSM.
- Security & Cryptography: Cryptography, TLS/SSL, certificate-based authentication, and modern cryptographic practices.
- Identity & Directory Services: Microsoft Active Directory, AD CS, ADFS, and LDAP.
- Enterprise Infrastructure: Windows Server, Linux/Unix, enterprise networking, and security infrastructure.
- Cloud & Virtualization: AWS, Microsoft Azure, GCP, VMware, and Hyper-V.
- Enterprise Applications: F5, Citrix NetScaler, IIS, Apache HTTP Server, Oracle WebLogic, and IBM WebSphere.
- Solution Architecture & Implementation: Technical discovery, solution design, deployment, configuration, integration, testing, and production readiness.
- Customer Consulting: Technical workshops, architecture sessions, stakeholder management, technical advisory, and customer engagement.
- Troubleshooting & Problem Solving: Root-cause analysis and resolution of complex PKI, certificate, infrastructure, identity, and integration issues.
- Documentation & Knowledge Transfer: Architecture documentation, implementation guides, operational procedures, troubleshooting guides, as-built documentation, and customer training.
- Automation & Integration: Certificate lifecycle automation, system integrations, orchestration, and process optimization.

Note: Interested Candidates, Please share their resume at [email protected]

📌 Professional Services Consultant - Cyber Ark (Noida)
🏢 Trantor
📍 Noida