Cyber Security Engineer

Cloudxtreme; Hyderabad, Chennai District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Ally is seeking a Certificate and PKI Engineering Specialist within the IPRM team. The role focuses on implementing controls and maintaining security configurations and tooling to meet security requirements.

You will manage PKI infrastructure, TLS certificates, and HSM operations, collaborating with stakeholders and vendors to ensure continuous coverage and reliable security tooling.

Qualifications

• Experience engineering and management of Venafi Trust Protection Platform (TPP).
• PKI and cryptography methods on premise and cloud.
• CA providers such as Microsoft CA, Entrust, DigiCert.
• Management of HSMs for cryptographic keys.
• Lifecycle management of TLS certificates and related tooling.
• Interface with vendors to troubleshoot certificate/key issues.
• Ability to document system configurations for key/certificate management.
• Participation in sprint planning and agile ceremonies.

Responsibilities

• Engineering PKI infrastructure including CAs and Registration Authorities.
• Assist design, test and implement changes to PKI infrastructure.
• Assist in management of HSMs for cryptographic keys.
• Support lifecycle of TLS certificates for internal/external systems.
• Interface with vendors for support on certificates and keys.
• Create and maintain documentation for key/certificate management.

Skills

TPP experience

PKI & crypto

HSM management

Linux systems

TLS lifecycle

Tools

Venafi TPP

Microsoft CA

Entrust

DigiCert

MSO

HSM platforms

Job description

Role & responsibilities

The Cyber Security Technology Key and Certificate Engineer position at Ally is a member of the Information Protection and Risk Management (IPRM) team and reports to a Manager of Cyber Security Technology. The engineer works with a team to implement technical controls and tools to meet specific security requirements and defines processes and standards to ensure that security configurations and tools are maintained.

The Certificate Management Engineer is a subject matter expert (SME) in engineering solutions for Allys key and certificate management program. The engineer will be responsible for ongoing incremental engineering required to continuously achieve the best coverage and operation of the technology and will assist in troubleshooting system degradations and outages if required. The primary responsibilities of the role will involve the following:

The Work Itself

• Engineering aspects of the company’s Public Key Infrastructure (PKI) including:
  • Internally and externally hosted Certification Authorities (CAs) and Registration Authorities
  • Centralized key and certificate management
• Assist in the design, test, implement changes/additions to the public key and certificate management infrastructures.
• Assist in management of Hardware Security Modules (HSM) for cryptographic key management.
• Assist critical stakeholders on the lifecycle of public and private/internal TLS certificates.
• Interface with vendors via support cases and troubleshooting certificates and key-related issues.
• Ability to create and maintain system documentation for key and certificate management. technologies, including installation, configuration, and appropriate troubleshooting steps.
• Participate in sprint planning, backlog refinement, and additional agile ceremonies with Scrum Masters.

The Skills You Bring

• Experience engineering and management of the Venafi Trust Protection Platform (TPP)
• PKI and Cryptography methods both on premise and cloud
  • Certificate Authority providers (e.g., Microsoft CA, Entrust, DigiCert)
  • Key and Certificate Management Platforms
  • PKIs – specifically Microsoft ADCS and Entrust MSO
• Ability to troubleshoot customer-reported issues in certificate management.
• Experience with cryptography, HSMs, and Linux-based operating systems.
• Ability to configure, manage, and ensure compliance of HSM technologies.

Preferred Qualifications

• 3+ years’ experience with the Venafi Trust Protection Platform (TPP)
• 3+ years’ experience supporting certificate authorities (Entrust or the Microsoft ADCS)
• 3+ years’ experience supporting Hardware Security Modules platforms.
• Must be willing to work after-hours and weekends when technical issues arise which require immediate resolution.
• Strong analytical, technical writing and verbal communication skills
• A strong customer/client focus with ability to manage expectations appropriately and provide superior customer/client experience and build long-term relationships.