Pki Security Analyst

Alike Thoughts; Dadri, Hyderabad, Gurugram District; Hybrid; INR 1,200,000 - 1,800,000; Full time

Job summary

Alike Thoughts in Dadri (India) seeks a PKI and cryptography expert to own certificate lifecycle management, inventories, and key protection initiatives. You will partner with security and infrastructure teams to implement runbooks, automate workflows, and strengthen compliance across certificate operations.

Ideal candidates bring 5-8 years in cybersecurity with PKI focus, experience in regulated environments, and relevant certifications.

Qualifications

• 5-8 years in cybersecurity/infrastructure security with PKI lifecycle experience
• Experience in regulated enterprise environments preferred
• CISSP/CISM/Security+/vendor PKI certifications preferred

Responsibilities

• Assess PKI processes, inventories, dependencies and pain points
• Design and support certificate lifecycle operations (request, issuance, renewal, revocation, expiry)
• Review CA hierarchy, profiles, and key management fundamentals
• Define runbooks, escalation paths, and reporting metrics for certificate management
• Remediate expired/weak/noncompliant certificates with app infra and security teams
• Identify automation opportunities across discovery, renewal, and reporting workflows
• Support audit, compliance, and risk reporting related to cryptographic controls

Skills

PKI lifecycle management

Certificate inventory renewal

CA hierarchy & key management

HSM key protection

Cryptographic controls

Operational runbooks

Job description

Role Summary

Provide deep subject matter expertise for Public Key Infrastructure certificate lifecycle management and cryptographic services operations

Key Responsibilities

• Assess current PKIcertificate lifecycle processes tools inventories dependencies and operational pain points
• Design and support certificate lifecycle operational processes including request issuance renewal revocation inventory and expiry management
• Review CA hierarchy certificate profiles key protection patterns ownership models and control gaps
• Define operational runbooks exception handling escalation paths and reporting metrics for certificate management
• Work with application infrastructure and security teams to remediate expired weak or noncompliant certificates
• Provide guidance on automation opportunities across discovery renewal and reporting workflows
• Support audit compliance and risk reporting related to cryptographic controls

Primary Skills

• PKI and certificate lifecycle management
• Certificate inventory renewal and expiry operations
• CA hierarchy certificate profiles and key management fundamentals
• Hardware security module key protection concepts
• Cryptographic controls and encryption governance
• Operational runbook development

Secondary Skills

• Venafi DigiCert Microsoft CA Entrust or equivalent CLM platforms
• TLSSSL mTLS and application certificate dependency analysis
• Scriptingautomation for certificate reporting
• ITSM workflow integration
• PCI DSS NIST and regulatory control awareness
• Audit evidence and KPI reporting

Experience Qualifications

• 5-8 years in cybersecurityinfrastructure security with strong PKIcertificate lifecycle experience
• Prior experience in regulated enterprise environments preferred
• CISSP CISM Security cloud security or vendor PKI certifications preferred