We are seeking an experienced Consultant – Level L3 with minimum 48 months of experience to join our Identity Management team, focusing on Public Key Infrastructure (PKI), certificate lifecycle management, certificate authorities and enterprise cryptographic services. The ideal candidate will support design, implementation, L3 operations, audits, automation and service improvement for enterprise PKI environments..
The ideal candidate will:
§Design, implement and support PKI solutions that meet organizational security and compliance requirements.
§Develop and maintain best practices for PKI architecture, certificate authorities, key management and cryptographic protocols.
§Provide L3 support for certificate issuance, renewal, revocation, enrollment, template, chain validation and authentication-related issues.
§Manage the lifecycle of digital certificates from issuance to revocation across enterprise applications, users, devices and services.
§Implement or support automation frameworks for certificate renewals, distribution, monitoring and compliance checks.
§Conduct regular reviews, audits and assessments of PKI infrastructure to identify weaknesses and improvement areas.
§Collaborate with Security, Operations, Application Owners and Service Providers on incidents, changes, risk remediation and service improvements.
§Build strong professional relationships with client personnel and communicate complex PKI topics clearly to technical and non-technical stakeholders.
Mandatory Certification Required:
•Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified PKI Professional (CPKI), or similar security / PKI certification preferred.
Technical Skills Required:
•Minimum 48 months of experience in PKI, certificate services, cybersecurity, infrastructure security or identity management operations.
•In-depth knowledge of PKI technologies including encryption algorithms, certificate authorities, certificate chains and key management practices.
•Experience with major PKI tools and solutions such as Microsoft Active Directory Certificate Services, Entrust, DigiCert or similar platforms.
•Strong understanding of security protocols such as TLS, SSL and IPsec.
•Hands-on experience with certificate templates, CRL/OCSP, certificate enrollment, renewal, revocation and PKI monitoring activities.
•Good understanding of certificate-based authentication, smart card / device certificates, web server certificates and enterprise trust models.
•Ability to troubleshoot certificate chain validation, expired certificates, revocation failures, enrollment issues and application certificate errors.
•Experience with documentation, audit evidence preparation, compliance checks, SOPs, operational reporting and client updates.
Behavioral / team skills
•Excellent communication (written and verbal) and interpersonal skills
•Ready to work in Shifts (on 3 shift rotation pattern)
•Flexibility to adapt to a variety of engagement types, working hours and work environments and locations
•Proven ability to work creatively and analytically in a problem-solving environment
•Desire to learn and contribute
•Focused and self-motivated approach to work
•Personal drive and positive work ethic to deliver results within tight deadlines and in demanding situations
Educational qualifications
§Bachelor's degree in Computer Science, Information Technology, or related field; Master's degree is a plus.
Shared job