Job Title

Cyber Security – PKI & Certificate Management (L3 / Senior Engineer)Role OverviewWe are seeking a Senior PKI & Certificate Management Engineer (L3) to support the implementation, operations, and continuous improvement of enterprise PKI and certificate services across on‑prem and hybrid cloud environments.The role focuses on hands‑on certificate lifecycle management, platform administration, automation, and troubleshooting, working closely with Architecture, IAM, Cloud, Network, and DevOps teams to ensure secure and reliable certificate services with zero certificate‑related outages.Key ResponsibilitiesPKI Operations & EngineeringSupport implementation and administration of Root and Issuing CAs under defined enterprise PKI architecture.Manage certificate lifecycle activities including issuance, renewal, rotation, revocation, escrow, archival, and destruction.Perform hands‑on configuration and support for TLS, mTLS, code signing, device certificates, and service certificates.Assist in maintaining OCSP and CRL services, ensuring high availability and proper certificate validation.Support HSM operations, including key generation, backups, restores, and routine maintenance under dual‑control procedures.Troubleshoot certificate issues impacting applications, APIs, devices, and infrastructure.Platform & Technology SupportOperate and support PKI platforms such as:Microsoft AD CSEJBCAVenafi / Keyfactor / DigiCertAWS Private CA / Azure Key Vault backed CAIntegrate certificates with:Web servers (IIS, NGINX, Apache)Load balancers (F5, Netscaler, ALB)API gateways and service mesh environmentsSupport certificate onboarding and automation for cloud, containers, Kubernetes, and DevOps pipelines.Automation & ToolingImplement and maintain certificate automation using:ACME, cert‑managerScripts (PowerShell, Bash, Python)REST APIs provided by certificate platformsAssist CI/CD teams with certificate deployment and renewal processes.Support GitOps‑based workflows for certificate operations.Governance, Risk & Compliance (Support Role)Assist with maintaining PKI documentation such as CP/CPS, runbooks, and standard operating procedures.Support audit activities by providing logs, evidence, and configuration details (SOX, PCI DSS, ISO 27001, HIPAA, GDPR).Perform periodic checks to identify:Expiring certificatesWeak cryptographic configurationsShadow or unmanaged certificatesFollow defined least‑privilege and segregation‑of‑duties controls for PKI and HSM access.Incident & Security SupportSupport incident response activities related to:Certificate mis‑issuanceKey compromiseCertificate‑related outagesExecute defined incident response and recovery playbooks.Participate in post‑incident reviews and remediation activities.Required Skills & QualificationsCore Technical SkillsStrong understanding of PKI fundamentals and X.509 certificatesHands‑on experience with TLS 1.2 / TLS 1.3, OCSP, CRL, EKU, SANExperience with RSA, ECC, SHA‑2 (awareness of PQC is a plus)Working experience with at least two PKI platforms:AD CS, EJBCA, Venafi, Keyfactor, DigiCert, AWS Private CA, Vault PKIExposure to HSMs and key management (Thales, Entrust, SafeNet, CloudHSM)Automation & IntegrationScripting experience using PowerShell, Bash, or PythonCertificate automation using ACME / cert‑managerIntegration with:AD / Entra IDLinux / Windows systemsSecrets managers (Vault, AKV, AWS Secrets Manager)Professional Experience6–14years overall IT experience7+ years of hands‑on experience in PKI & certificate managementExperience working as a Senior Engineer / L3 support in enterprise environmentsLocation – Bangalore, White fieldWork Type – HybridJob Type – Full TimeInterview Process:Technical RoundR2 – Technical roundCompensation DiscussionHR DiscussionWissen Infotech:LinkedIn: company:We provide technical solutions to complex business problems of our customers. Our people are the core of everything we do and we make sure they feel professionally fulfilled. Today Wissen has over 4000 IT professionals delivering world-class IT Services and Solutions to clients worldwide. Wissens services include Technology Consulting, Software Development, Application Services, Systems Integration, Re-engineering, and Independent Testing Services.Wissen utilizes its multi-location facilities and industry standards to provide best-in-class solutions for clients. Wissen leverages its multi-site facilities in USA and India, offering customers a combination of onsite, offsite, and offshore service models. Wissen is uniquely positioned to help you with your needs in building enterprise systems, adopting a visualization and business intelligence stack, or implementing a Digital strategy