Pki Security Analyst

Athena BharatJobs; Dadri, Chennai District; Hybrid; INR 1,500,000 - 2,300,000; Full time

Job summary

Athena BharatJobs seeks a cyber security architect with deep PKI, CLM, PQC expertise to design and modernize enterprise cryptographic environments while ensuring scalability and compliance.

In this role you will lead PKI deployment, cloud integration, and crypto agility initiatives, advising cross-functional teams and guiding secure cryptographic practices across on-premises, cloud, and hybrid platforms.

Qualifications

• Hands-on PKI design, deployment, and migration.
• Expert CLM platforms expertise.
• X.509, CRL, OCSP; key management and HSMs.
• TLS/SSL, mTLS, code signing, document signing.
• SSH key management.
• Crypto discovery and automation tooling.
• PQC and crypto agility knowledge.
• Cloud PKI and key management (AWS/Azure/GCP).
• Scripting/automation: PowerShell, Python, Bash.

Responsibilities

• Design and implement enterprise PKI and CLM across on-prem, cloud, and hybrid.
• Define cryptographic architecture, standards, and governance.
• Develop crypto agility roadmap and quantum-safe transition plan.
• Assess current cryptographic environments and define target architectures.
• Advise application, cloud, network, and infrastructure teams on secure crypto integration.
• Lead PKI deployment, HSM integration, key management, and certificate automation.
• Implement certificate discovery, inventory, and lifecycle automation.
• Support secure key management across multi-cloud and on-prem.
• Integrate PKI with IAM, DevOps, containers, service mesh, and Zero Trust.
• Act as crypto SME in client engagements; deliver architecture docs and briefs.

Job description

Job Summary:

We are looking for a highly skilled Cyber Security Architect / Consultant with deep expertise in Public Key Infrastructure (PKI), Certificate Lifecycle Management (CLM), cryptographic technologies, Post-Quantum Cryptography (PQC), and crypto agility. The role involves designing, implementing, and modernizing enterprise cryptographic environments while ensuring scalability, compliance, and future readiness against quantum threats.

Key Responsibilities:

Architecture & Strategy

• Design and implement enterprise PKI and CLM solutions (on-premises, cloud, and hybrid).
• Define and drive cryptographic architecture, standards, and governance.
• Develop crypto agility roadmap and support transition to quantum-safe cryptography.
• Perform current-state assessment, gap analysis, and target-state architecture for cryptographic environments.
• Provide consulting and advisory to application, cloud, network, and infrastructure teams on secure cryptographic integration.

Implementation & Operations

• Lead deployment and migration of PKI hierarchies, HSM integration, key management, and certificate automation.
• Implement certificate discovery, inventory, and lifecycle automation.
• Support secure key management practices across multi-cloud and on-prem platforms.
• Integrate PKI with IAM, DevOps, containers, service mesh, and Zero Trust architectures.

Post-Quantum Readiness

• Assess quantum risk exposure across enterprise systems.
• Evaluate and recommend PQC algorithms and hybrid cryptographic models.
• Define and execute quantum-safe migration strategy.

Risk, Compliance & Governance

• Ensure compliance with NIST, ETSI, ISO 27001, PCI-DSS, and regulatory requirements.
• Conduct cryptographic risk assessments and threat modeling.
• Define policies, standards, and best practices for enterprise cryptography.

Stakeholder & Consulting

• Act as SME for cryptography and PKI in client engagements.
• Prepare and deliver technical presentations, architecture documents, and executive briefings.
• Collaborate with cross-functional teams and provide technical leadership.

Required Technical Skills

• Strong hands-on experience in PKI design, implementation, and migration.
• Expertise in Certificate Lifecycle Management (CLM) platforms.
• Deep understanding of:
• X.509 certificates, CRL, OCSP
• Key management and HSMs
• TLS/SSL, mTLS, code signing, document signing
• SSH key management
• Knowledge of crypto discovery and automation tools.
• Strong understanding of Post-Quantum Cryptography (PQC) and crypto agility frameworks.
• Experience in cloud PKI and key management (AWS, Azure, GCP).
• Scripting/automation using PowerShell, Python, Bash, or APIs.