
Sr Administrator (Support & Operations)
About the role
Job Summary
We are seeking an experienced and highly skilled Architect for Certificate Hub Management (PKI L2) to join our technology team in Pune or Hyderabad, India. The ideal candidate will play a pivotal role in designing, implementing, and managing robust Public Key Infrastructure (PKI) solutions, ensuring secure certificate management across the organization. This role requires strong technical expertise, strategic thinking, and hands-on experience with PKI solutions at an enterprise level. Key Responsibilities Design and architect end-to-end PKI and certificate management solutions, ensuring scalability, security, and compliance with organizational and regulatory requirements. Lead PKI L2 operations, including installation, configuration, and lifecycle management of digital certificates and Certificate Authorities (CAs). Provide technical leadership and guidance to PKI administrators and support teams, ensuring best practices in certificate issuance, renewal, revocation, and auditing. Collaborate with security, infrastructure, and application teams to integrate PKI solutions with various enterprise platforms and applications. Manage and troubleshoot issues related to certificate lifecycle, CRL/OCSP management, and key escrow/recovery operations. Develop and maintain technical documentation, architecture diagrams, and operational procedures for PKI solutions. Stay current with industry trends, emerging threats, and best practices in PKI and cryptography, recommending improvements as necessary. Support compliance audits and respond to security incidents involving certificates and cryptographic assets. Participate in 24x7 on-call rotation for PKI L2 support as required. Required Qualifications Bachelor’s or Master’s degree in Computer Science, Information Security, or related field. 8+ years of experience in IT security, with at least 5 years specializing in PKI, certificate management, or cryptography. Hands-on experience with enterprise PKI platforms (e.g., Microsoft ADCS, Venafi, Digi Cert, Entrust, or similar). Strong understanding of X.509 certificates, TLS/SSL, S/MIME, code signing, and related protocols. Proficiency in scripting and automation (e.g., PowerShell, Python, Bash) for certificate lifecycle management. Experience with certificate management in hybrid cloud environments (Azure, AWS, GCP) is highly desirable. Solid knowledge of security frameworks and standards (e.g., NIST, ISO 27001, PCI-DSS). Excellent problem-solving, communication, and documentation skills. Relevant certifications (e.g., CISSP, CISM, Microsoft Certified: Security, Compliance, and Identity Fundamentals) are a plus. Preferred Skills Experience with Certificate Hub or centralized certificate management tools. Knowledge of DevOps practices and integration of PKI with CI/CD pipelines. Familiarity with Hardware Security Modules (HSMs) and key management solutions. Prior experience in large-scale enterprise or regulated environments.
Key Responsibilities
We are seeking an experienced and highly skilled Architect for Certificate Hub Management (PKI L2) to join our technology team in Pune or Hyderabad, India. The ideal candidate will play a pivotal role in designing, implementing, and managing robust Public Key Infrastructure (PKI) solutions, ensuring secure certificate management across the organization. This role requires strong technical expertise, strategic thinking, and hands-on experience with PKI solutions at an enterprise level. Key Responsibilities Design and architect end-to-end PKI and certificate management solutions, ensuring scalability, security, and compliance with organizational and regulatory requirements. Lead PKI L2 operations, including installation, configuration, and lifecycle management of digital certificates and Certificate Authorities (CAs). Provide technical leadership and guidance to PKI administrators and support teams, ensuring best practices in certificate issuance, renewal, revocation, and auditing. Collaborate with security, infrastructure, and application teams to integrate PKI solutions with various enterprise platforms and applications. Manage and troubleshoot issues related to certificate lifecycle, CRL/OCSP management, and key escrow/recovery operations. Develop and maintain technical documentation, architecture diagrams, and operational procedures for PKI solutions. Stay current with industry trends, emerging threats, and best practices in PKI and cryptography, recommending improvements as necessary. Support compliance audits and respond to security incidents involving certificates and cryptographic assets. Participate in 24x7 on-call rotation for PKI L2 support as required. Required Qualifications Bachelor’s or Master’s degree in Computer Science, Information Security, or related field. 8+ years of experience in IT security, with at least 5 years specializing in PKI, certificate management, or cryptography. Hands-on experience with enterprise PKI platforms (e.g., Microsoft ADCS, Venafi, Digi Cert, Entrust, or similar). Strong understanding of X.509 certificates, TLS/SSL, S/MIME, code signing, and related protocols. Proficiency in scripting and automation (e.g., PowerShell, Python, Bash) for certificate lifecycle management. Experience with certificate management in hybrid cloud environments (Azure, AWS, GCP) is highly desirable. Solid knowledge of security frameworks and standards (e.g., NIST, ISO 27001, PCI-DSS). Excellent problem-solving, communication, and documentation skills. Relevant certifications (e.g., CISSP, CISM, Microsoft Certified: Security, Compliance, and Identity Fundamentals) are a plus. Preferred Skills Experience with Certificate Hub or centralized certificate management tools. Knowledge of DevOps practices and integration of PKI with CI/CD pipelines. Familiarity with Hardware Security Modules (HSMs) and key management solutions. Prior experience in large-scale enterprise or regulated environments.
Skill Requirements
We are seeking an experienced and highly skilled Architect for Certificate Hub Management (PKI L2) to join our technology team in Pune or Hyderabad, India. The ideal candidate will play a pivotal role in designing, implementing, and managing robust Public Key Infrastructure (PKI) solutions, ensuring secure certificate management across the organization. This role requires strong technical expertise, strategic thinking, and hands-on experience with PKI solutions at an enterprise level. Key Responsibilities Design and architect end-to-end PKI and certificate management solutions, ensuring scalability, security, and compliance with organizational and regulatory requirements. Lead PKI L2 operations, including installation, configuration, and lifecycle management of digital certificates and Certificate Authorities (CAs). Provide technical leadership and guidance to PKI administrators and support teams, ensuring best practices in certificate issuance, renewal, revocation, and auditing. Collaborate with security, infrastructure, and application teams to integrate PKI solutions with various enterprise platforms and applications. Manage and troubleshoot issues related to certificate lifecycle, CRL/OCSP management, and key escrow/recovery operations. Develop and maintain technical documentation, architecture diagrams, and operational procedures for PKI solutions. Stay current with industry trends, emerging threats, and best practices in PKI and cryptography, recommending improvements as necessary. Support compliance audits and respond to security incidents involving certificates and cryptographic assets. Participate in 24x7 on-call rotation for PKI L2 support as required. Required Qualifications Bachelor’s or Master’s degree in Computer Science, Information Security, or related field. 8+ years of experience in IT security, with at least 5 years specializing in PKI, certificate management, or cryptography. Hands-on experience with enterprise PKI platforms (e.g., Microsoft ADCS, Venafi, Digi Cert, Entrust, or similar). Strong understanding of X.509 certificates, TLS/SSL, S/MIME, code signing, and related protocols. Proficiency in scripting and automation (e.g., PowerShell, Python, Bash) for certificate lifecycle management. Experience with certificate management in hybrid cloud environments (Azure, AWS, GCP) is highly desirable. Solid knowledge of security frameworks and standards (e.g., NIST, ISO 27001, PCI-DSS). Excellent problem-solving, communication, and documentation skills. Relevant certifications (e.g., CISSP, CISM, Microsoft Certified: Security, Compliance, and Identity Fundamentals) are a plus. Preferred Skills Experience with Certificate Hub or centralized certificate management tools. Knowledge of DevOps practices and integration of PKI with CI/CD pipelines. Familiarity with Hardware Security Modules (HSMs) and key management solutions. Prior experience in large-scale enterprise or regulated environments.
Other Requirements
null
Required skills
PKI
Certificate management
CA administration
CRL/OCSP
LDAP
SSO
About HCL Technologies
Pune
Headquarters