IT Operations Specialist-Certificate, DNS, and Identity Management

Actualize; Pune District; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Actualize is seeking an IT Operations Specialist to manage certificate, DNS, and identity services in Pune. You will oversee SSL/TLS lifecycle, PKI, DNS, AD/Entra ID in hybrid environments, and drive automation to improve reliability and security.

Responsibilities include implementing certificate management, DNS domain lifecycle, GPOs, MFA, SSO, and RBAC, while collaborating with security and regional IT teams to deliver stable services.

Qualifications

• Bachelor’s degree in Engineering, IT, Computer Science, or equivalent qualification.
• 7+ years of IT experience in enterprise/shared services.
• 3+ years SSL/TLS certificate lifecycle management.
• Strong PKI, OpenSSL, Certbot, ACME and key management experience.
• DNS administration and domain lifecycle management experience.
• 5+ years Active Directory and hybrid identity environments.
• Hands-on Microsoft Entra ID, GPO, MFA, SSO, and Conditional Access.
• Knowledge of SAML, OIDC, service principals, and Azure RBAC.
• Automation and scripting with Python or PowerShell.
• ITIL, incident management, change management, and service operations knowledge.
• Excellent troubleshooting and stakeholder communication.
• Ability to work with global cross-functional teams.

Responsibilities

• Manage SSL/TLS certificate lifecycle including issuance, renewal, monitoring, and inventory.
• Administer PKI, certificate templates, CSR generation, and key management.
• Manage internal and external DNS infrastructure and domain lifecycles.
• Support domain registration, renewal, transfer, and DNS risk mitigation.
• Administer Active Directory and Entra ID in hybrid identities.
• Manage GPOs, directory services, users, roles, and access.
• Troubleshoot MFA, SSO, CA, SAML, and OIDC authentication.
• Manage Azure subscriptions, resource groups, and RBAC.
• Develop scripts to automate certificate, DNS, and identity ops.
• Monitor platform health, certificate expiry, DNS availability, and risks.
• Collaborate with security, infra, apps, and regional IT teams.
• Maintain operations runbooks and knowledge repositories.
• Drive standardization and automation across global IT operations.

Skills

Stakeholder management

Communication skills

Automation mindset

Education

Bachelor's degree in Engineering / IT / CS

Tools

OpenSSL

Certbot

ACME

PowerShell

Python

Job description

IT Operations Specialist – Certificate, DNS & Identity Management

Location – Pune

Job Type – Full Time

Looking for an experienced IT Operations Specialist – Certificate, DNS & Identity Management to manage and support enterprise certificate lifecycle, DNS infrastructure, and identity management services. The ideal candidate should have strong hands‑on experience in SSL/TLS certificates, PKI, DNS, Active Directory, hybrid identity, Azure/Entra ID, and IT operations, with a focus on security, automation, reliability, and continuous improvement.

Responsibilities

• Manage the complete SSL/TLS certificate lifecycle, including issuance, renewal, monitoring, deployment, and certificate inventory
• Administer PKI and certificate management solutions, including certificate templates, CSR generation, and key management
• Manage internal and external DNS infrastructure, DNS records, and domain lifecycle activities
• Support domain registration, renewal, transfer, and DNS-related risk mitigation activities
• Administer Active Directory and Microsoft Entra ID in hybrid identity environments
• Manage Group Policy (GPO), directory services, users, roles, and access configurations
• Troubleshoot authentication issues involving MFA, SSO, Conditional Access, SAML, and OIDC
• Manage Azure resources including subscriptions, resource groups, and RBAC assignments
• Develop scripts and automation to improve certificate, DNS, and identity management operations
• Monitor platform health, certificate expiry, DNS availability, and operational risks
• Collaborate with security, infrastructure, application, and regional IT teams to ensure reliable service delivery
• Maintain operational documentation, processes, runbooks, and knowledge repositories
• Drive standardization, automation, and continuous improvement across global IT operations

Must-Have Qualifications

• Bachelor’s degree in Engineering, IT, Computer Science, or equivalent qualification
• 7+ years of overall IT experience in enterprise or shared services environments
• 3+ years of hands‑on experience in SSL/TLS certificate and certificate lifecycle management
• Strong experience with PKI, OpenSSL, Certbot, ACME, CSR generation, and key management
• Strong hands‑on experience in DNS administration and domain lifecycle management
• 5+ years of experience in Active Directory, directory services, and hybrid identity environments
• Hands‑on experience with Microsoft Entra ID, GPO, MFA, SSO, and Conditional Access
• Knowledge of SAML, OIDC, service principals, and Azure RBAC
• Experience with automation and scripting, preferably Python or PowerShell
• Strong understanding of ITIL, incident management, change management, and service operations
• Excellent troubleshooting, stakeholder management, and communication skills
• Ability to work effectively with global, cross-functional, and multicultural teams

Good to Have

• Experience with Sectigo Certificate Manager (SCM)
• Knowledge of DNSSEC
• Experience with advanced certificate use cases such as code signing, device certificates, SAML, and client authentication
• Experience with APIs and automation integrations
• Knowledge of Power BI or other operational reporting tools