Pki Security Analyst

Athena Consultancy Services; Dadri, Chennai District; Hybrid; INR 1,800,000 - 3,200,000; Full time

Job summary

Athena Consultancy Services is seeking a highly skilled Cyber Security Architect/Consultant with deep expertise in PKI, CLM, cryptographic technologies, PQC, and crypto agility. The role focuses on designing, implementing, and modernizing cryptographic environments for scalability, compliance, and quantum-readiness.

Lead PKI deployments across on‑prem, cloud, and hybrid platforms; integrate HSMs; automate certificates; and align cryptography with IAM, DevOps, and Zero Trust.

Qualifications

• Experience in PKI design, implementation, and migration.
• Expertise in Certificate Lifecycle Management (CLM) platforms.
• Knowledge of X.509, CRL, and OCSP.
• Strong key management and HSM understanding.
• Experience with TLS/mTLS, code signing, and document signing.
• Knowledge of crypto discovery and automation tools.
• Familiarity with PQC and crypto agility frameworks.
• Cloud PKI and multi-cloud key management experience.
• Scripting/automation in PowerShell, Python, Bash, or via APIs.

Responsibilities

• Design and implement enterprise PKI and CLM solutions (on-prem, cloud, hybrid).
• Define cryptographic architecture, standards, and governance.
• Develop crypto agility roadmap and quantum-safe migration strategies.
• Assess current state, identify gaps, and define target-state architectures.
• Advise application, cloud, network, and infra teams on secure cryptographic integration.
• Lead deployment and migration of PKI hierarchies and certificate automation.
• Integrate PKI with IAM, DevOps, containers, service mesh, and Zero Trust.

Skills

PKI design

CLM platforms

X.509 certificates

Key management

HSM integration

TLS/SSL, mTLS

Code signing

Document signing

SSH key management

Crypto agility

PQC

Cloud PKI

PowerShell

Python

Bash

APIs

Tools

HSMs

CLM platforms

Job description

Job Summary:

We are looking for a highly skilled Cyber Security Architect / Consultant with deep expertise in Public Key Infrastructure (PKI), Certificate Lifecycle Management (CLM), cryptographic technologies, Post-Quantum Cryptography (PQC), and crypto agility. The role involves designing, implementing, and modernizing enterprise cryptographic environments while ensuring scalability, compliance, and future readiness against quantum threats.

Key Responsibilities:

Architecture & Strategy

• Design and implement enterprise PKI and CLM solutions (on-premises, cloud, and hybrid).
• Define and drive cryptographic architecture, standards, and governance.
• Develop crypto agility roadmap and support transition to quantum-safe cryptography.
• Perform current-state assessment, gap analysis, and target-state architecture for cryptographic environments.
• Provide consulting and advisory to application, cloud, network, and infrastructure teams on secure cryptographic integration.

Implementation & Operations

• Lead deployment and migration of PKI hierarchies, HSM integration, key management, and certificate automation.
• Implement certificate discovery, inventory, and lifecycle automation.
• Support secure key management practices across multi-cloud and on-prem platforms.
• Integrate PKI with IAM, DevOps, containers, service mesh, and Zero Trust architectures.

Post-Quantum Readiness

• Assess quantum risk exposure across enterprise systems.
• Evaluate and recommend PQC algorithms and hybrid cryptographic models.
• Define and execute quantum-safe migration strategy.

Risk, Compliance & Governance

• Ensure compliance with NIST, ETSI, ISO 27001, PCI-DSS, and regulatory requirements.
• Conduct cryptographic risk assessments and threat modeling.
• Define policies, standards, and best practices for enterprise cryptography.

Stakeholder & Consulting

• Act as SME for cryptography and PKI in client engagements.
• Prepare and deliver technical presentations, architecture documents, and executive briefings.
• Collaborate with cross-functional teams and provide technical leadership.

Required Technical Skills

• Strong hands-on experience in PKI design, implementation, and migration.
• Expertise in Certificate Lifecycle Management (CLM) platforms.
• Deep understanding of:
• X.509 certificates, CRL, OCSP
• Key management and HSMs
• TLS/SSL, mTLS, code signing, document signing
• SSH key management
• Knowledge of crypto discovery and automation tools.
• Strong understanding of Post-Quantum Cryptography (PQC) and crypto agility frameworks.
• Experience in cloud PKI and key management (AWS, Azure, GCP).
• Scripting/automation using PowerShell, Python, Bash, or APIs.