Identity & Access Management Technical Lead

ameriprise; Dadri; Hybrid; INR 1,800,000 - 3,000,000; Full time

Job summary

Ameriprise India LLP invites applications for a Technical Lead in identity and access management to design, implement, and operate the Security Certificate Lifecycle. You will lead PKI efforts, manage Microsoft PKI, and implement provisioning across multiple platforms, including cloud services.

The role requires deep PKI expertise and collaboration with cross-functional teams in a hybrid in-office setting. The position offers full-time employment with in-office collaboration three days a week

Qualifications

• 7+ years of PKI infrastructure experience.
• Strong understanding of X.509, RSA, SSL/TLS, Wildcard and SAN certificates and management.
• Experience with Active Directory Certificate Services (Microsoft PKI - 2016).
• Hands-on experience with certificate lifecycle management tools and processes.
• Experience integrating certificate management tools with applications/tools to securely manage private keys and certificates.
• Experience in AWS IAM.

Responsibilities

• Lead PKI technology and operations as Tech Lead.
• Administer and operate Microsoft PKI infrastructure.
• Operate certificate lifecycle management solution (e.g. Venafi).
• Implement automatic certificate provisioning using tools like F5, Apache/IIS, AWS ACM, AWS EKS, Azure, IBM Datapower, Connect Direct.
• Provide PKI support across VPN, Wireless, and provisioning.
• Maintain certificate lifecycle workflows and SOPs.
• Report on PKI infrastructure performance and status.
• Manage AWS IAM and ACM operations.
• Oversee Microsoft Active Directory operations.
• Provide on-call support during weekends.

Skills

PKI infrastructure

X.509 certificates

SSL/TLS management

Active Directory Certificates

Certificate lifecycle management

AWS IAM

Education

B.Tech/B.E in computer science & engineering, IT or equivalent

Tools

Venafi

F5

AWS ACM

Job description

About Our Company

Ameriprise India LLP has been providing client based financial solutions to help clients plan and achieve their financial objectives for 20 years. We are part of Ameriprise Financial Inc., a US financial planning company headquartered in Minneapolis with a global presence and diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of year-end 2024. The firm's focus areas include Asset Management and Advice, Retirement Planning and Insurance Protection.

Be part of an inclusive, collaborative culture that rewards you for your contributions, and work with other talented individuals who share your passion for doing great work. You'll also have plenty of opportunities to make your mark at the office and a difference in your community. So, if you're talented, driven and want to work for a strong, ethical company that cares, take the next step and create a career at Ameriprise India LLP.

Job Description

A Technical Lead in the identity and access management team is needed to help with the design, implementation, configurations/development of the Security Certificate LifeCycle.

Key Responsibilities

• Work as PKI (Public Key Infrastructure) Tech-Lead.
• Administer and operate Microsoft PKI infrastructure.
• Administer and operate certificate lifecycle management solution i.e. Venafi.
• Work on implementation of automatic certificate provisioning solution with tools like F5, app servers (Apace\IIS), AWS ACM, AWS EKS, Azure, IBM Datapower, Connect Direct etc.
• Provide technical support for PKI and different certificate deployment implementations on multiple systems like VPN, Wireless, automatic certificate provisioning etc.
• Maintain certificate lifecycle management workflow and related documentation.
• Maintain and formulate Standard Operating Procedures.
• Responsible for reporting on PKI infrastructure.
• Responsible for AWS IAM, ACM operations.
• Responsible for Microsoft Active Directory operations.
• Provide On-Call support during weekend.

Required Qualifications

B.Tech/B.E Degree in computer science & engineering, IT or equivalent technical degree with:

• 7+ years of relevant experience in supporting PKI infrastructure.
• Strong understanding of X.509, RSA, SSL/TLS, Wildcard, SAN certificate and certificate management processes.
• Operations experience of Active Directory Certificate Services (Microsoft PKI - 2016).
• Should have hands on experience of a certificate lifecycle management tool and processes.
• Should have experience of integrating certificate management tool with various applications/tools in an infrastructure for managing communications and crypto objects i.e. Private keys and certificate securely.
• Should have experience in AWS IAM.

Preferred Qualifications

• Knowledge of the Venafi tool.
• Good to have experience in Microsoft Active Directory.
• Good to have experience in HSM.
• Good to have experience of certificate provisioning via an MDM solution.
• Good communication and presentation skills.
• Ready to take initiatives and accountability of the project deliverables.

In-Office Collaboration

We are a client-centric, relationship-based business. Working together, in-person, is foundational to how we achieve results. By fostering a culture of face-to-face collaboration, idea sharing, productivity and personal connection, we deliver for our stakeholders - clients, advisors, employees and shareholders. Our employees work in the office at least three (3) days per week, with flexibility to work from home two (2) days per week. Some roles may require additional in-office time or different in-office expectations, and specific requirements will be discussed during the hiring process.

Full-Time/Part-Time

Full time

Timings

(4:45p-1:15a)

India Business Unit

AWMPO AWMP&S President's Office

Job Family Group

Technology

Ameriprise India LLP is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, genetic information, age, sexual orientation, gender identity, disability, military status, veteran status, marital status, pregnancy, family status or any other basis prohibited by law.

We are committed to fostering an inclusive and accessible recruitment process for individuals with disabilities. If you require a reasonable accommodation to participate in the application or interview process, speak to your recruiter to discuss how we can support you.