Pki Security Analyst

Ciel HR; India; On-site; INR 1,800,000 - 2,600,000; Full time

Job summary

Ciel HR seeks an experienced Enterprise PKI specialist to manage certificate lifecycle, maintain Venafi and Microsoft PKI environments, and drive automation via PowerShell and REST APIs. You will coordinate with infrastructure, security, and cloud teams to ensure secure, compliant certificate operations.

The role covers issuance, renewal, revocation, deployment, and issue resolution, with a focus on automation, monitoring availability, and responding to incidents in a large enterprise setting.

Qualifications

• Strong hands-on experience with Venafi Trust Protection Platform and Microsoft PKI.
• Deep understanding of Certificate Lifecycle Management.
• Experience with CAPI, JDK Keystores, F5 Load Balancers, AWS ACM, and Venafi APIs.
• Strong PowerShell scripting and REST API integration skills.
• Experience with Windows Server administration.
• Knowledge of Active Directory, Group Policy, and enterprise authentication mechanisms.
• Good understanding of LAN, WAN, DNS, VPN, Load Balancers, and Firewalls.
• Strong troubleshooting and problem-solving skills.
• Experience working in large-scale enterprise and security environments.

Responsibilities

• Manage and support enterprise PKI and Certificate Lifecycle Management services.
• Perform certificate issuance, renewal, revocation, deployment, and troubleshooting activities.
• Handle day-to-day PKI operational support, incidents, service requests, and problem resolution.
• Administer and maintain Venafi Trust Protection Platform and Microsoft PKI environments.
• Integrate certificate management solutions with CAPI, JDK Keystores, F5, AWS ACM, and Venafi APIs.
• Develop and maintain automation scripts using PowerShell and REST APIs.
• Monitor PKI infrastructure health, certificate expiry, compliance, and security standards.
• Collaborate with infrastructure, network, cloud, application, and security teams.
• Perform Root Cause Analysis (RCA) and implement corrective actions for recurring issues.
• Support audit, compliance, and governance requirements related to PKI services.
• Drive automation and process improvement initiatives to improve operational efficiency.

Skills

Venafi Platform

Microsoft PKI

Certificate Lifecycle Mgmt

CAPI

JDK Keystores

F5 Load Balancers

AWS ACM

PowerShell

REST APIs

Windows Server

Active Directory

Job description

Key Responsibilities

• Manage and support enterprise PKI and Certificate Lifecycle Management services.
• Perform certificate issuance, renewal, revocation, deployment, and troubleshooting activities.
• Handle day-to-day PKI operational support, incidents, service requests, and problem resolution.
• Administer and maintain Venafi Trust Protection Platform and Microsoft PKI environments.
• Integrate certificate management solutions with CAPI, JDK Keystores, F5, AWS ACM, and other certificate consumers.
• Develop and maintain automation scripts using PowerShell and REST APIs.
• Monitor PKI infrastructure health, certificate expiry, compliance, and security standards.
• Collaborate with infrastructure, network, cloud, application, and security teams.
• Perform Root Cause Analysis (RCA) and implement corrective actions for recurring issues.
• Support audit, compliance, and governance requirements related to PKI services.
• Drive automation and process improvement initiatives to improve operational efficiency.

Required Skills

• Strong hands-on experience with Venafi Trust Protection Platform and Microsoft PKI.
• Deep understanding of Certificate Lifecycle Management.
• Experience with CAPI, JDK Keystores, F5 Load Balancers, AWS ACM, and Venafi APIs.
• Strong PowerShell scripting and REST API integration skills.
• Experience with Windows Server administration.
• Knowledge of Active Directory, Group Policy, and enterprise authentication mechanisms.
• Good understanding of LAN, WAN, DNS, VPN, Load Balancers, and Firewalls.
• Strong troubleshooting and problem-solving skills.
• Experience working in large-scale enterprise and security environments.

Preferred Skills

• Knowledge of HSM (Hardware Security Module) technologies.
• Experience with AWS/Azure cloud certificate management.
• Familiarity with ITIL processes.
• Relevant PKI / Cybersecurity certifications.
• Experience working in highly regulated environments with security and compliance requirements.

Mandatory Skills

Enterprise PKI, Venafi Trust Protection Platform, Microsoft PKI, Certificate Lifecycle Management, CAPI, JDK Keystores, F5, AWS ACM, Venafi APIs, PowerShell, REST APIs, Windows Server, Active Directory