Keyfactor Certificate Management (L2) Engineer with Active Directory

UST; Bengaluru; On-site; INR 1,500,000 - 2,300,000; Full time

Job summary

UST is seeking a Keyfactor Certificate Management Engineer to provide operational and technical support for enterprise certificate lifecycle management using Keyfactor. The role is responsible for certificate discovery, inventory management, issuance, renewal, automation, troubleshooting, and maintaining the health of the certificate management platform.

This position will work closely with infrastructure, security, and application teams to ensure secure and efficient certificate operations

Qualifications

• 3-5 years of experience in PKI, certificate management, infrastructure security, or related technologies.
• Hands-on experience with Keyfactor or a comparable enterprise certificate lifecycle management platform.
• Proficiency with Keyfactor, certificate management, and Active Directory

Responsibilities

• Manage day-to-day operations of the Keyfactor platform and certificate management services.
• Perform certificate discovery and scanning across servers, applications, network devices, load balancers, cloud environments, and other infrastructure components.
• Configure, schedule, monitor, and troubleshoot certificate discovery scans within Keyfactor.
• Analyze discovered certificates and identify expired, expiring, duplicate, unmanaged, or non-compliant certificates.
• Support certificate enrollment, issuance, renewal, replacement, revocation, and retirement activities.
• Configure and maintain automated certificate renewal and deployment workflows using Keyfactor.
• Monitor automation jobs and troubleshoot certificate renewal, deployment, orchestration, and discovery failures.
• Assist with onboarding servers, applications, certificate stores, and endpoints into the certificate management platform.
• Maintain accurate certificate inventories, ownership details, application mappings, and expiration records.
• Support integration of Keyfactor with Active Directory-based certificate services and enterprise PKI platforms.
• Assist application and infrastructure teams with certificate installation, certificate chains, trust relationships, and SSL/TLS-related issues.
• Investigate certificate-related incidents including expired certificates, trust failures, certificate chain issues, private key concerns, and deployment failures.
• Configure and monitor certificate expiry notifications, dashboards, operational reports, and s.
• Support certificate policy enforcement and compliance requirements.
• Maintain operational documentation, SOPs, troubleshooting guides, and knowledge base articles.
• Collaborate with senior PKI specialists on complex certificate management and platform-related issues.
• Support incident, request, problem, and change management activities related to certificate services.

Skills

Keyfactor

Certificate Management

Active Directory

Job description

Role Description

Job Summary

We are seeking a Keyfactor Certificate Management Engineer to provide operational and technical support for enterprise certificate lifecycle management using Keyfactor. The role is responsible for certificate discovery, inventory management, issuance, renewal, automation, troubleshooting, and maintaining the health of the certificate management platform. This position will work closely with infrastructure, security, and application teams to ensure secure and efficient certificate operations across the enterprise.

Key Responsibilities

• Manage day-to-day operations of the Keyfactor platform and associated certificate management services.
• Perform certificate discovery and scanning across servers, applications, network devices, load balancers, cloud environments, and other infrastructure components.
• Configure, schedule, monitor, and troubleshoot certificate discovery scans within Keyfactor.
• Analyze discovered certificates and identify expired, expiring, duplicate, unmanaged, or non-compliant certificates.
• Support certificate enrollment, issuance, renewal, replacement, revocation, and retirement activities.
• Configure and maintain automated certificate renewal and deployment workflows using Keyfactor.
• Monitor automation jobs and troubleshoot certificate renewal, deployment, orchestration, and discovery failures.
• Assist with onboarding servers, applications, certificate stores, and endpoints into the certificate management platform.
• Maintain accurate certificate inventories, ownership details, application mappings, and expiration records.
• Support integration of Keyfactor with Active Directory-based certificate services and enterprise PKI platforms.
• Assist application and infrastructure teams with certificate installation, certificate chains, trust relationships, and SSL/TLS-related issues.
• Investigate certificate-related incidents including expired certificates, trust failures, certificate chain issues, private key concerns, and deployment failures.
• Configure and monitor certificate expiry notifications, dashboards, operational reports, and s.
• Support certificate policy enforcement and compliance requirements.
• Maintain operational documentation, SOPs, troubleshooting guides, and knowledge base articles.
• Collaborate with senior PKI specialists on complex certificate management and platform-related issues.
• Support incident, request, problem, and change management activities related to certificate services.

Required Skills

Proficient

• Keyfactor
• Certificate Management
• Active Directory

Experience

• 3-5 years of experience in PKI, certificate management, infrastructure security, or related technologies.
• Hands-on experience with Keyfactor or a comparable enterprise certificate lifecycle management platform.

Why Join UST

UST is a global technology company focused on digital transformation, innovation, and technology-led business solutions. Joining UST provides opportunities to work on enterprise-scale security and infrastructure initiatives, collaborate with skilled technology professionals, contribute to innovative digital platforms, and accelerate your career through continuous learning and growth opportunities.

Skills

Active Directory Certificate Services, Apache HTTP Server, Apache Tomcat, CI/CD, Change Management, Cloud Infrastructure, HTTP, Hardware Security Module, IIS, ITIL, Incident Management