PKI, HSM & Certificate Services Sr. Engineer

IND KCI Medical India Private limited; Bengaluru; Hybrid; INR 4,000,000 - 7,000,000; Full time

Job summary

Solventum in Bangalore is seeking a hands-on PKI/HSM Crypto Sr. Security Engineer to design, implement, and support enterprise PKI and cryptographic services across global environments.

You will manage certificate lifecycles, HSM operations, and security compliance while collaborating with security and cloud teams. The role requires 5+ years of PKI experience, ADCS/WIndows Server know‑how, and strong scripting/automation skills.

Qualifications

• Bachelor’s Degree or higher AND 7 years of enterprise PKI, certificate management, HSM, cryptography, infrastructure security, or related experience
• 5+ years of hands‑on experience administering enterprise PKI or certificate management environments
• Experience with ADCS and Windows Server environments
• Experience with Keyfactor and certificate lifecycle automation
• Experience administering HSM platforms or secure key management technologies
• Understanding of X.509, CRL, OCSP, PKCS, TLS/SSL, code signing, encryption, and cryptographic key management
• Willingness to participate in on-call rotation

Responsibilities

• Designing, implementing, administering, and supporting enterprise PKI solutions (ADCS, Keyfactor)
• Managing full certificate lifecycle: issuance, renewal, revocation, inventory, workflow
• Administering Thales Luna HSM platforms and related security activities
• Managing external SSL/TLS services (Sectigo) with domain/organization validation
• Developing PKI architectures and cryptographic policy
• Troubleshooting PKI, TLS/SSL, code-signing across enterprise apps
• Implementing certificate automation with web servers, load balancers, cloud, DevOps
• Ensuring compliance with NIST, PCI-DSS, SOX, ISO 27001

Skills

PKI

HSM

Certificate management

ADCS

Keyfactor

Sectigo

Thales Luna HSM

TLS/SSL

Code signing

Automation scripting

Education

Bachelor's degree

Tools

Keyfactor

Sectigo Certificate Manager

Thales Luna HSM

Job description

At Solventum, we improve lives by helping healthcare professionals do their best work. Join a team using innovation and insight to make a real impact on the future of healthcare. All roles listed are with Solventum, and we’re committed to protecting your personal information—learn more in our Privacy Policy: https://www.solventum.com/en-us/home/legal/website-privacy-statement/applicant-privacy/ Job Description: 3M Health Care is now Solventum At Solventum, we enable better, smarter, safer healthcare to improve lives. As a new company with a long legacy of creating breakthrough solutions for our customers’ toughest challenges, we pioneer game-changing innovations at the intersection of health, material and data science that change patients' lives for the better while enabling healthcare professionals to perform at their best. Because people, and their wellbeing, are at the heart of every scientific advancement we pursue. We partner closely with the brightest minds in healthcare to ensure that every solution we create melds the latest technology with compassion and empathy. Because at Solventum, we never stop solving for you.

The Impact You’ll Make in this Role

You are a hands-on cryptography and certificate services engineer supporting a next-generation Identity and Access Management team. You will help design, administer, automate, and support enterprise Public Key Infrastructure (PKI), Hardware Security Module (HSM), certificate lifecycle management, and cryptographic services across Solventum’s global environment. You are excited about strengthening cryptographic foundations in a large global company by supporting secure certificate issuance, lifecycle automation, key protection, and platform resiliency across cloud, on-premises, third-party hosted, and co-location environments. You are a self-driven, hands-on individual who enjoys solving complex PKI, HSM, certificate, TLS/SSL, code-signing, and key management challenges. You bring strong technical depth, operational discipline, and a continuous improvement mindset to critical security services. As a PKI/HSM Crypto Sr. Security Engineer you will have the opportunity to tap into your curiosity and collaborate with some of the most innovative and diverse people around the world.

• Designing, implementing, administering, and supporting enterprise PKI solutions, including Microsoft ADCS and Keyfactor certificate lifecycle automation platforms.
• Managing the full certificate lifecycle, including issuance, renewal, revocation, inventory management, policy enforcement, and automation for internal and external certificates.
• Administering and maintaining Thales Luna HSM platforms, including key generation, backup, recovery, partition management, firmware upgrades, and security compliance activities.
• Managing external public certificate services through Sectigo, including certificate provisioning, domain validation, organization validation, and integrations with enterprise applications and services.
• Developing and maintaining PKI architectures, cryptographic standards, and key management procedures aligned with security and regulatory requirements.
• Troubleshooting complex PKI, certificate, TLS/SSL, code-signing, and cryptographic issues across enterprise applications, network devices, cloud services, and security platforms.
• Implementing and supporting certificate automation and integrations with web servers, load balancers, network appliances, cloud platforms, DevOps pipelines, and identity solutions.
• Ensuring compliance with industry standards and security frameworks, including NIST, PCI-DSS, SOX, ISO 27001, and CA/Browser Forum requirements where applicable.
• Performing PKI risk assessments, security reviews, disaster recovery testing, key ceremonies, and operational readiness activities for critical cryptographic infrastructure.
• Collaborating with security, infrastructure, application, and cloud engineering teams to design secure cryptographic solutions and support enterprise security initiatives.

Minimum Qualifications

Solventum requires (at a minimum) the following qualifications: Bachelor’s Degree or higher AND 7 years of enterprise PKI, certificate management, HSM, cryptography, infrastructure security, or related experience

Required Qualifications

• 5+ years of hands‑on experience administering enterprise PKI or certificate management environments, including certificate issuance, renewal, revocation, inventory, and lifecycle operations.
• Experience supporting Microsoft Active Directory Certificate Services (ADCS), Windows Server environments, and enterprise certificate templates or enrollment workflows.
• Experience with certificate lifecycle automation platforms such as Keyfactor, including certificate discovery, enrollment, renewal, workflow, and integration support.
• Experience administering HSM platforms or secure key management technologies, including key generation, backup, recovery, partition management, and operational controls.
• Strong understanding of X.509 certificates, CRL, OCSP, PKCS standards, TLS/SSL, code signing, encryption, and cryptographic key management concepts.
• Experience troubleshooting PKI, certificate chain, TLS/SSL, certificate deployment, code‑signing, and cryptographic issues across enterprise applications and infrastructure.
• Willingness to participate in an on‑call rotation as an escalation point for high‑severity PKI, HSM, certificate, and cryptographic service issues.

Additional Qualifications

• 10+ years of experience administering enterprise PKI and certificate management environments.
• Hands‑on experience with Keyfactor, Sectigo Certificate Manager, and Thales Luna HSM platforms.
• Experience managing public certificate services, including certificate provisioning, domain validation, organization validation, and externally trusted certificate operations.
• Experience supporting certificate automation through APIs, scripting, ACME, SCEP, ServiceNow workflows, cloud platforms, DevOps pipelines, or enterprise application integrations.
• Experience performing PKI risk assessments, disaster recovery testing, key ceremonies, operational readiness reviews, and audit or compliance support.
• Advanced scripting or automation skills, including PowerShell, Python, REST APIs, or other automation frameworks.

Work location: Bangalore (Hybrid)

About Solventum

A new healthcare company with a rich history. With more than 70 years of delivering healthcare innovations, we continue to move the industry forward by helping to solve our customers’ biggest challenges.

20,000+ employees worldwide. Solventum relies on the courage and the boundless insights of professionals worldwide to achieve exceptional results for our customers and those who rely on them.

Healthcare that leads with heart and humility starts with listening and never finishes, only evolves. As long as healthcare challenges remain unsolved, we will be here, united by empathy and a relentless belief that countless lives are improved through our work.

Operations in 38 countries.

Driven by our dedication to improved outcomes for all we serve, we break through by making unprecedented connections that impact lives. In more than 300 offices and facilities around the world, we work closely with customers and partners to create positive healthcare outcomes that transcend borders.

To realize our shared vision, we harness diverse talents and perspectives from every background to not only address our customers' most urgent priorities but anticipate the needs of the future.