Identity & Access Management Technical Lead

Threadneedle group; India; On-site; INR 2,800,000 - 4,800,000; Full time

Job summary

Ameriprise India LLP is seeking a Technical Lead in PKI/Identity & Access Management to design, implement, and operate the certificate lifecycle. You will drive PKI initiatives, administer Microsoft PKI and Venafi, and enable automated certificate provisioning across AWS, Azure, and on‑prem environments.

Ideal candidates have 7+ years of PKI experience and strong knowledge of X.509, RSA, SSL/TLS, and certificate management.

Qualifications

• 7+ years of relevant experience in supporting PKI infrastructure.
• Strong understanding of X.509, RSA, SSL/TLS, Wildcard, SAN certificates and certificate management.
• Experience with Active Directory Certificate Services (Microsoft PKI - 2016).
• Experience with certificate lifecycle management tools and processes.
• Experience integrating certificate management tools with applications/tools for crypto objects.
• Experience in AWS IAM.

Responsibilities

• Act as PKI Tech-Lead.
• Administer and operate Microsoft PKI infrastructure.
• Administer Venafi and certificate lifecycle management.
• Implement automatic certificate provisioning with tools like F5, Apache/IIS, AWS ACM, AWS EKS, Azure, IBM Datapower, Connect Direct.
• Provide technical support for PKI and certificate deployments on VPN and Wireless.
• Maintain certificate lifecycle workflow and related documentation.
• Formulate and maintain Standard Operating Procedures.
• Report on PKI infrastructure.
• Handle AWS IAM and ACM operations.
• Operate Microsoft Active Directory services.
• Provide on-call support during weekends.

Skills

PKI expertise

Active Directory

Venafi

Certificate lifecycle

AWS IAM

SSL/TLS (X.509)

F5

AWS ACM

Azure

AWS EKS

IIS

Networking / VPN

Education

B.Tech/B.E in CS/IT

Tools

Apache/IIS

Job description

About Our Company

Ameriprise India LLP has been providing client based financial solutions to help clients plan and achieve their financial objectives for 20 years. We are part of Ameriprise Financial Inc., a US financial planning company headquartered in Minneapolis with a global presence and diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of year-end 2024. The firm’s focus areas include Asset Management and Advice, Retirement Planning and Insurance Protection.

Be part of an inclusive, collaborative culture that rewards you for your contributions, and work with other talented individuals who share your passion for doing great work. You’ll also have plenty of opportunities to make your mark at the office and a difference in your community. So, if you're talented, driven and want to work for a strong, ethical company that cares, take the next step and create a career at Ameriprise India LLP.

Job Description

A Technical Lead in the identity and access management team is needed to help with the design, implementation, configurations/development of the Security Certificate LifeCycle.

Key Responsibilities

• Work as PKI (Public Key Infrastructure) Tech-Lead.


• Administer and operate Microsoft PKI infrastructure.


• Administer and operate certificate lifecycle management solution i.e. Venafi.


• Work on implementation of automatic certificate provisioning solution with tools like F5, app servers (Apace\\IIS), AWS ACM, AWS EKS, Azure, IBM Datapower, Connect Direct etc.


• Provide technical support for PKI and different certificate deployment implementations on multiple systems like VPN, Wireless, automatic certificate provisioning etc.


• Maintain certificate lifecycle management workflow and related documentation.


• Maintain and formulate Standard Operating Procedures.


• Responsible for reporting on PKI infrastructure.


• Responsible for AWS IAM, ACM operations.


• Responsible for Microsoft Active Directory operations.


• Provide On-Call support during weekend.

Required Qualifications

B.Tech/B.E Degree in computer science & engineering, IT or equivalent technical degree with:

• 7+ years of relevant experience in supporting PKI infrastructure.


• Strong understanding of X.509, RSA, SSL/TLS, Wildcard, SAN certificate and certificate management processes.


• Operations experience of Active Directory Certificate Services (Microsoft PKI - 2016).


• Should have hands on experience of a certificate lifecycle management tool and processes. .


• Should have experience of integrating certificate management tool with various applications\\tools in an infrastructure for managing communications and crypto objects i.e. Private keys and certificate securely.


• Should have experience in AWS IAM.

Preferred Qualifications

• Knowledge of the Venafi tool.


• Good to have experience in Microsoft Active Directory.


• Good to have experience in HSM.


• Good to have experience of certificate provisioning via an MDM solution.


• Good communication and presentation skills.


• Ready to take initiatives and accountability of the project deliverables.

In-Office Collaboration

We are a client-centric, relationship-based business. Working together, in-person, is foundational to how we achieve results. By fostering a culture of face-to-face collaboration, idea sharing, productivity and personal connection, we deliver for our stakeholders - clients, advisors, employees and shareholders. Our employees work in the office at least three (3) days per week, with flexibility to work from home two (2) days per week. Some roles may require additional in-office time or different in-office expectations, and specific requirements will be discussed during the hiring process.

Full-Time/Part-Time

Full time

Timings

(4:45p-1:15a)

India Business Unit

AWMPO AWMP&S President's Office

Job Family Group

Technology

Ameriprise India LLP is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, genetic information, age, sexual orientation, gender identity, disability, military status, veteran status, marital status, pregnancy, family status or any other basis prohibited by law.

We are committed to fostering an inclusive and accessible recruitment process for individuals with disabilities. If you require a reasonable accommodation to participate in the application or interview process, speak to your recruiter to discuss how we can support you.