MS PKI - CLM Solution Architect (Certificate Lifecycle) | Pan India

Mount Talent Consulting; Pune District, Mumbai, Bengaluru; Vor Ort; INR 3.000.000 - 5.500.000; Vollzeit

Benefits dieser Stelle

Hybrid work mode

Enterprise PKI exposure

Zusammenfassung

Value Innovation Labs is seeking an experienced PKI and Certificate Lifecycle Management (CLM) professional to lead enterprise PKI design, implementation and governance across on-prem, cloud and hybrid environments.

You will own CLM platform deployments (AppViewX, CyberArk, Venafi or Keyfactor) and collaborate with Security, Infrastructure, Cloud, DevOps and Applications teams. Strong automation via REST/PowerShell is expected.

Qualifikationen

• 8–9 years core PKI experience.
• ADCS PKI implementation expertise.
• Hands-on with major CLM tools (AppViewX, CyberArk, Venafi or Keyfactor).

Aufgaben

• Lead design, implementation and management of enterprise CLM across platforms.
• Manage certificate lifecycle operations: discovery, issuance, renewal, revocation, deployment and monitoring.
• Administer CLM platforms and Microsoft PKI environments.
• Configure integrations with AD CS, public CAs, cloud platforms (Azure, AWS, GCP).
• Integrate CLM with ITSM, load balancers, web servers and DevOps toolchains.
• Design certificate automation workflows using REST APIs and scripting.
• Enforce governance, compliance and risk controls for certificates.
• Provide PKI architecture guidance to security and infra teams.
• Mentor team members and lead continuous improvement.

Kenntnisse

PKI architecture

Governance and risk controls

Stakeholder management

Mentoring

Communication

Tools

AppViewX

CyberArk Certificate Manager

Venafi

Keyfactor

ADCS

Jobbeschreibung

Job Summary

Value Innovation Labs is hiring an experienced PKI and Certificate Lifecycle Management (CLM) professional to lead and enhance enterprise-wide PKI for a leading enterprise client. You will own the design, implementation and governance of CLM platforms across on-prem, cloud and hybrid environments.

Mandatory Skills

• ADCS (Active Directory Certificate Services) PKI implementation is mandatory, along with strong CLM expertise
• Minimum 8-9 years of core, hands‑on PKI experience
• Hands‑on with at least one of AppViewX CERT+ (preferred), CyberArk Certificate Manager, Venafi Trust Protection Platform, DigiCert or Keyfactor

Roles & Responsibilities

• Lead the design, implementation and management of enterprise CLM on AppViewX, CyberArk, Venafi, Keyfactor and Microsoft PKI
• Lead certificate lifecycle operations: discovery, issuance, renewal, revocation, deployment and monitoring
• Administer CLM platforms and Microsoft PKI (ADCS) environments
• Configure and maintain integrations with AD CS, public CAs, cloud platforms (Azure, AWS, GCP) and enterprise applications
• Integrate CLM with ITSM, load balancers, web servers and DevOps toolchains
• Design certificate automation workflows using native capabilities, REST APIs, PowerShell and scripting
• Manage certificate inventories and enforce governance, compliance and risk controls
• Define and enforce policies for certificate issuance, key management, cryptographic standards and private key protection
• Build reporting, monitoring and auditing for certificate health and compliance
• Support onboarding and automation across servers, applications, load balancers, cloud and containers
• Partner with Security, Infrastructure, Cloud, DevOps and Application teams
• Advise on PKI architectures, protocols, trust models and automation strategy
• Mentor team members and drive continuous improvement
• Stay current on machine identity, PKI and cybersecurity trends

Desired Candidate Profile

• 8 to 13 years of overall experience, with at least 8-9 years of hands‑on PKI experience
• Proven ADCS (Microsoft PKI) implementation experience
• Hands‑on experience with at least one major CLM tool: AppViewX, CyberArk Certificate Manager, Venafi or Keyfactor
• Knowledge of public CAs such as DigiCert, Sectigo, Entrust and GlobalSign
• Working knowledge of ACME, EST and SCEP protocols
• Familiarity with Azure Key Vault, AWS Certificate Manager and Google CAS
• Strong PowerShell and REST API scripting skills
• ServiceNow integration experience is a plus
• Strong PKI architecture and certificate governance knowledge
• Good communication and stakeholder management skills

Why Apply

• Permanent role on Value Innovation Labs payroll with a marquee enterprise client
• Hybrid work mode; openings across Mumbai, Pune, Bengaluru, Chennai, Hyderabad, Delhi NCR and Kolkata
• Ownership of enterprise PKI and machine identity architecture
• Immediate to 30 days notice preferred (up to 60 days considered for strong profiles)