PKI Engineer

Vrinda International; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Vrinda International seeks a highly skilled PKI Engineer to design, implement, and manage digital certificate infrastructures across cloud and on‑prem environments. You will secure identities, manage keys, and oversee certificate lifecycles within a modern DevSecOps framework.

Responsibilities include architecting PKI solutions with Fortanix DSM, AWS KMS, and AD CS, plus automating provisioning via Terraform and ACME, and scripting in Python/PowerShell for REST API integration.

Qualifications

• 3–6 years of IT experience in PKI and IAM.
• Hands-on with Fortanix DSM, AWS KMS, Azure Key Vault, and HSMs.
• Automation and IaC using Terraform; ACME protocols; Git versioning.
• Knowledge of KMIP, PKCS#11, OpenSSL, JSON; digital signatures.
• Python and PowerShell scripting for security tasks.

Responsibilities

• Architect and maintain PKI solutions across cloud and on‑prem.
• Manage HSMs (Thales Luna) and KMIP/PKCS#11 compliance.
• Automate certificate provisioning and lifecycle with Terraform and ACME.
• Develop Python and PowerShell scripts to interact with REST APIs.
• Enforce security policies for signatures and certificate validation.
• Collaborate with DevSecOps to secure CI/CD pipelines.
• Monitor certificate usage, renewal, revocation lists.

Skills

PKI

IAM

DevSecOps

REST APIs

Python scripting

PowerShell scripting

Tools

Fortanix DSM

AWS KMS

Azure Key Vault

DigiCert

Keyfactor

Venafi

Microsoft AD CS

Thales Luna HSM

Terraform

ACME protocols

Git

OpenSSL

JSON

Python

PowerShell

Job description

Welcome to Vrinda International's Talent Portal

Discover your next career milestone with Vrinda International, a leading recruitment firm specializing in IT talent acquisition, international education consultancy, and language coaching opportunities. Our portal streamlines your job search with cutting-edge Applicant Tracking System (ATS) technology.

Why Choose Us?

• Seamless Candidate Experience: Upload your resume, browse live openings in Java, Spring Boot, microservices, Angular, and more – or explore roles in global education programs (Germany, UK, France).
  
• Advanced Matching: Our AI-driven tools match your skills to top IT, business development, and overseas study consultancy positions.
  
• Easy Application Process: One-click apply, real-time status updates, and integration with LinkedIn for effortless profile imports.
  
• Exclusive Opportunities: Access hidden job markets, visa guidance for international roles, and personalized career coaching.
  

Job Description

Summary

We are seeking a highly skilled PKI Engineer to lead the design, implementation, and management of our public key infrastructure across diverse cloud and on-premises environments. In this critical role, you will be responsible for securing digital identities, managing encryption keys, and ensuring robust certificate lifecycle management to protect sensitive data and communications. This position serves as the backbone of our security architecture, integrating advanced cryptographic standards with modern DevSecOps practices to maintain the integrity and confidentiality of our IT Services ecosystem.

Responsibilities

• Architect and maintain enterprise-grade PKI solutions utilizing platforms such as Fortanix DSM, AWS KMS, Azure Key Vault, DigiCert, Keyfactor, Venafi, and Microsoft Active Directory Certificate Services (AD CS).
  
• Manage Hardware Security Modules (HSM) including Thales Luna, ensuring secure key generation, storage, and cryptographic operations in compliance with KMIP and PKCS#11 standards.
  
• Automate certificate provisioning and lifecycle workflows using Terraform and ACME protocols to streamline operations and reduce manual intervention.
  
• Develop and maintain Python and PowerShell scripts to interact with REST APIs, enabling seamless integration between PKI systems and broader IT infrastructure.
  
• Implement and enforce security policies related to digital signatures, cryptography, and certificate validation across hybrid cloud environments.
  
• Collaborate with DevSecOps teams to embed security controls into CI/CD pipelines, ensuring that cryptographic best practices are applied throughout the software development lifecycle.
  
• Monitor and audit certificate usage, renewal processes, and revocation lists to mitigate risks associated with expired or compromised credentials.
  

Requirements

Requirements:

• Possess 3 to 6 years of professional experience in Information Technology, specifically within the realm of Public Key Infrastructure and Identity and Access Management (IAM).
  
• Demonstrate proven expertise with leading PKI and key management tools, including Fortanix DSM, AWS KMS, Azure Key Vault, DigiCert, Keyfactor, Venafi, Microsoft AD CS, and Thales Luna HSM.
  
• Show strong proficiency in automation and infrastructure-as-code using Terraform, along with hands-on experience in ACME protocols and Git version control.
  
• Exhibit solid knowledge of security integration patterns, including DevSecOps methodologies, CI/CD security, and the implementation of RESTful APIs.
  
• Be well-versed in core cryptographic standards and libraries such as KMIP, PKCS#11, OpenSSL, and JSON, with a deep understanding of digital signatures and HSM concepts.
  
• Display advanced scripting capabilities in Python and PowerShell for automating complex security tasks and managing system configurations.