PKI / Venafi TPP Engineer Certificate Management & Encryption

Cloudxtreme; Chennai District; Hybrid; INR 900,000 - 1,300,000; Full time

Job summary

Cloudxtreme is seeking an experienced PKI security engineer to implement, manage, and optimize Venafi TPP and related PKI infrastructure. The role covers certificate lifecycle, CA management (Microsoft ADCS and Entrust MSO), and secure HSM configuration across on-prem and cloud environments.

The candidate should have deep cryptography knowledge, strong troubleshooting skills, and the ability to collaborate with security, network, and application teams.

Qualifications

• Experience in PKI, certificate management, encryption, or security engineering.
• Hands-on with Venafi TPP, Microsoft ADCS, Entrust, and HSM platforms.
• Strong understanding of cryptography principles, key management, and security frameworks.

Responsibilities

• Engineer, implement, and manage Venafi TPP and PKI infrastructure components.
• Oversee certificate lifecycle management including issuance, renewal, revocation, and compliance monitoring.
• Manage and support Certificate Authorities such as Microsoft ADCS and Entrust MSO.
• Configure and maintain HSMs ensuring security and compliance.
• Troubleshoot and resolve issues related to certificate management, encryption, and PKI integrations.
• Support cryptography and key management for on-prem and cloud environments.
• Collaborate with security, network, and application teams to ensure secure deployment.
• Maintain documentation and enforce security policies.
• Provide after-hours or weekend support when required.

Skills

Venafi TPP

Microsoft ADCS

Entrust

HSM platforms

Cryptography

Key management

Security compliance

Linux CLI

Analytical skills

Troubleshooting

Communication skills

Venafi Engineer cert

CISSP / PKI certs

Tools

Venafi TPP

Microsoft ADCS

Entrust MSO

HSM hardware

Job description

Role & Responsibilities:

• Engineer, implement, and manage Venafi Trust Protection Platform (TPP) and related PKI infrastructure components.
  


• Oversee certificate lifecycle management including issuance, renewal, revocation, and compliance monitoring.
  


• Manage and support Certificate Authorities (CA) such as Microsoft ADCS and Entrust MSO.
  


• Configure and maintain Hardware Security Modules (HSMs) ensuring security and operational compliance.
  


• Troubleshoot and resolve issues related to certificate management, encryption, and PKI integrations.
  


• Support cryptography and key management for both on-premise and cloud-based environments.
  


• Collaborate with internal security, network, and application teams to ensure secure certificate deployment.
  


• Maintain documentation, enforce standards, and ensure adherence to organizational security policies.
  


• Provide after-hours or weekend support when required for urgent technical resolutions.
  

Preferred Candidate Profile:

• Experience: Minimum 58 years in PKI, certificate management, encryption, or security engineering roles.
  


• Technical Expertise: Hands-on experience with Venafi TPP, Microsoft ADCS, Entrust, and HSM platforms.
  


• Strong understanding of cryptography principles, key management, and security compliance frameworks.
  


• Proficiency in Linux-based environments and command-line operations.
  


• Excellent analytical, troubleshooting, and communication skills.
  


• Certifications such as Venafi Certified Engineer, CompTIA Security+, CISSP, or Microsoft PKI certification are preferred.
  


• Ability to work independently, manage multiple priorities, and collaborate with cross-functional teams.
  


• Willing to work from Chennai (in-office) and support flexible hours when needed.