Job Description

Role Purpose

Band B3

An L3 resource must possess in-depth knowledge of the following skills to meet customer expectations: -Thales Luna SA HSM -Thales CiphertrustManager KMS -Microsoft ADCS PKI

-A PKI / ADCS Engineer is responsible for designing, deploying, and managing enterprise Public Key Infrastructure including Root CA, Intermediate CA, and Issuing CA servers while ensuring secure certificate issuance and validation processes. The role involves hands-on management of Microsoft ADCS components such as NDES (SCEP), CEP/CES services, and integration with Active Directory for auto-enrollment and authentication.
-The engineer must manage complete certificate lifecycle activities including certificate request, issuance, renewal, revocation, and troubleshooting of certificate-related issues across users, systems, and applications. Strong understanding of certificate store architecture and certificate chain validation is required to ensure trust relationships within enterprise environments.
-The role requires implementation and maintenance of Certificate Policy (CP) and Certification Practice Statement (CPS) aligned to organizational security standards and compliance requirements. The candidate should also manage CRL infrastructure including base CRL and delta CRL, ensuring proper publication and accessibility via CDP and AIA locations.
-The engineer should possess strong knowledge of cryptographic principles including asymmetric and symmetric encryption, hashing, and digital signatures along with practical understanding of PKCS standards, Cryptographic Service Providers (CSP), and Key Storage Providers (KSP).
-The role involves supporting SSL/TLS certificates across internal and external applications and ensuring adherence to industry standards like X.509 and TLS protocols. Strong troubleshooting skills are required for resolving issues related to certificate enrollment, chain errors, CRL accessibility, and authentication failures.
-The candidate must have good understanding of Active Directory including Group Policy, auto-enrollment configuration, and integration with PKI services for enterprise identity and access management.
-The role includes ensuring PKI high availability, fault tolerance, and disaster recovery by implementing proper backup, restore, and redundancy mechanisms across CA servers and related infrastructure.
-The engineer should work on operational support, monitoring PKI health, performing RCA for incidents, and maintaining documentation for PKI processes and environments.
Optional skills include experience with Linux-based certificate management, OpenSSL tools, cloud PKI platforms (Azure/AWS), and HSM integration for secure key management.

NOTE: Wipro needs immediate joiners only

͏

Do

• Ensuring customer centricity by providing apt cybersecurity 

• Monitoring and safeguarding the log sources and security access
• Planning for disaster recovery in the event of any security breaches
• Monitor for attacks, intrusions and unusual, unauthorized or illegal activity
• Performs moderately complex log reviews and forensic analysis to identify unauthorized or unacceptable access to data or systems
• Conduct security assessments, risk analysis and root cause analysis of security incidents
• Handling incidents escalated by the L1 team in 24x7 rotational shifts
• Use advanced analytics tools to determine emerging threat patterns and vulnerabilities
• Completing all tactical security operations tasks associated with this engagement.
• Analyses all the attacks and come up with remedial attack analysis
• Conduct detailed analysis of incidents and create reports and dashboards

• Stakeholder coordination & audit assistance

• Liaise with stakeholders in relation to cyber security issues and provide future recommendations
• Maintain an information security risk register and assist with internal and external audits relating to information security
• Assist with the creation, maintenance and delivery of cyber security awareness training for colleagues
• Advice and guidance to employees on issues such as spam and unwanted or malicious emails

͏

Deliver

͏

͏