Job Description:

- Certificate Services Product Ownership

- Own the Certificate Services capability across its operational, engineering, governance and strategic lifecycle.

- Develop and maintain the service roadmap, priorities and target operating model for enterprise PKI and certificate

- Lifecycle management.

- Establish explicit standards for certificate ownership, issuance, renewal, revocation, discovery and retirement.

- Maintain visibility of service health, certificate lifecycle risk, technical debt and upcoming cryptographic changes.

- Define meaningful operational and risk metrics for the Certificate Services estate.

- Work with application, infrastructure, security and architecture teams to ensure certificate services meet business and control requirements.

- PKI / CLM Transformation

- Provide technical and product leadership for the evaluation and implementation of strategic certificate lifecycle management and PKI platforms.

- Translate business, operational, security and regulatory requirements into platform and architecture requirements.

- Assess migration options from existing Microsoft AD CS services, including coexistence, certificate re-enrolment, template migration and retirement strategies.

- Work with vendors, architecture teams and engineering teams to validate solution capabilities and implementation approaches.

- Define migration principles that minimise operational disruption and preserve trust relationships during transition.

- Cryptographic Governance & Post-Quantum Readiness

- Provide leadership on enterprise certificate and cryptographic standards.





- Identify use of deprecated, weak or unsupported algorithms and coordinate appropriate remediation.

- Support cryptographic-agility initiatives and the organisation's transition toward Post-Quantum Cryptography.

- Contribute to cryptographic inventories, dependency analysis, risk assessments and migration roadmaps.

- Monitor emerging standards and industry developments affecting PKI, TLS, certificate lifetimes, cryptographic algorithms

- and PQC.

- Risk, Control & Audit

- Establish effective governance over certificate issuance, ownership, renewal and privileged PKI administration.

- Support security, risk, regulatory and audit requirements associated with PKI and cryptography.

- Ensure appropriate evidence, operational controls and documentation exist for critical Certificate Services processes.

- Identify material certificate or cryptographic risks and drive proportionate remediation.

- Maintain appropriate policies, standards, procedures and technical documentation.

- Technical Leadership & Team Development

- Act as the senior Certificate Services SME within the Authentication & Directory Services function.

- Provide technical leadership and mentoring to Certificate Services engineers.

- Support recruitment and development of additional PKI and certificate-management capability.

- Develop runbooks, engineering standards and knowledge-sharing practices that reduce reliance on individual

- specialists.

- Coordinate effectively with security architecture, application teams, infrastructure teams, cloud teams and external

- suppliers.

📌 Product Owner (Bengaluru)
🏢 Acme Services Private
📍 Bengaluru