We are looking for an experienced PKI Engineer / PKI Security Administrator with strong expertise in Microsoft PKI (MS PKI), Certificate Authority (CA) Administration, Certificate Lifecycle Management (CLM), Cryptography, and DigiCert solutions. The candidate will be responsible for designing, implementing, administering, and supporting enterprise Public Key Infrastructure environments, ensuring secure certificate management and compliance with organizational security standards.

Key Responsibilities

- Design, deploy, configure, and administer Microsoft Public Key Infrastructure (MS PKI) environments.

- Install, upgrade, and manage Root CA, Intermediate CA, Issuing CA, and related PKI components.

- Configure and maintain Certificate Authority (CA) policies, templates, CRL distribution points, OCSP, and certificate enrollment services.

- Manage end-to-end Certificate Lifecycle Management (CLM) activities including certificate issuance, renewal, revocation, replacement, and expiration monitoring.

- Administer and integrate DigiCert certificate management solutions across enterprise environments.

- Implement and support SSL/TLS certificates for web servers, applications, load balancers, reverse proxies, and network devices.

- Troubleshoot certificate-related issues involving applications, servers, browsers, authentication systems, and encryption services.

- Configure and maintain certificate auto-enrollment through Active Directory Group Policies.

- Perform PKI health checks, audits, compliance reviews, and security assessments.

- Support cryptographic implementations and key management activities.

- Ensure high availability and disaster recovery of PKI infrastructure.

- Collaborate with Security, Infrastructure, Application, and Cloud teams for certificate deployments and integrations.

- Create and maintain technical documentation,



operational procedures, and architecture diagrams.

- Participate in security incident investigations involving certificate or encryption-related issues.

Required Technical Skills

Core Skills

- Microsoft PKI (MS PKI)

- Certificate Authority (CA) Administration

- Certificate Lifecycle Management (CLM)

- DigiCert Certificate Management

- Enterprise PKI Architecture

- PKI Troubleshooting

Cryptography & Security

- Public Key Infrastructure (PKI)

- Cryptographic Algorithms (RSA, ECC)

- SSL/TLS Certificates

- Digital Signatures

- Encryption & Key Management

- Certificate Revocation Lists (CRL)

- Online Certificate Status Protocol (OCSP)

Microsoft Technologies

- Active Directory (AD)

- Azure Active Directory / Microsoft Entra ID

- Windows Server Administration

- Group Policy (GPO)

- Certificate Templates

- Auto Enrollment

Additional Preferred Skills

- Venafi

- AppViewX

- KeyFactor

- HSM (Hardware Security Modules)

- Azure Key Vault

- AWS Certificate Manager

- PowerShell Scripting

- CyberArk Certificate Manager

- Microsoft Entra Certificate-Based Authentication

Desired Candidate Profile

- 5-9 years of experience in Infrastructure Security, PKI Administration, or Certificate Management.

- Strong hands-on experience in deploying and managing Microsoft CA infrastructure.

- Experience with DigiCert certificate issuance and lifecycle operations.

- Positive understanding of enterprise security architecture and cryptography concepts.

- Experience in certificate automation and lifecycle management tools.

- Strong troubleshooting and problem-solving skills.

- Excellent communication and stakeholder management skills.

Certifications (Preferred)

- Microsoft Certified: Security, Compliance, and Identity Certifications

- DigiCert Trust Lifecycle Manager Certifications

- ISC2 CISSP

- CompTIA Security+

- PKI Professional Certifications

📌 PKI Engineer (Madurai)
🏢 HCLTech
📍 Madurai