Prin IT Technologist - DNS, PKI, Certification Services

MiniMed; Maharashtra; On-site; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Flexible benefits package

Competitive salary

Job summary

MiniMed is seeking a DNS & PKI Engineer responsible for the design, implementation, and support of enterprise DNS and certificate services. The role requires ensuring secure and highly available name resolution and compliance with security policies.

Candidates should have 5+ years of hands-on experience and a strong background in DNS engineering, PKI management, and integrating services like Infoblox and Cloudflare. MiniMed offers a competitive salary and flexible benefits, emphasizing employee commitment.

Qualifications

• 5+ years of hands-on experience in DNS engineering and PKI.
• Strong experience with Infoblox and DigiCert.
• Deep understanding of DNS protocols and TCP/IP networking.

Responsibilities

• Design and maintain enterprise DNS infrastructure.
• Oversee full certificate lifecycle management.
• Administer and optimize Cloudflare services.

Skills

DNS engineering

PKI / certificate lifecycle management

Infoblox

Cloudflare

Scripting/automation

Tools

Terraform

PowerShell

Python

Job description

At MiniMed, you can begin a lifelong career of exploration and innovation, while helping make a difference in the lives of people living with diabetes around the globe. You'll lead with purpose, breaking down barriers to innovation for a more connected, compassionate world.

About The Role

We are seeking a DNS & PKI Engineer responsible for the design, implementation, automation, and operational support of enterprise DNS and certificate services. This role is critical to ensure secure, highly available name resolution and certificate lifecycle management across hybrid environments.

Key Responsibilities

DNS Engineering & Operations

• Design, implement, and maintain enterprise DNS infrastructure, including:
  • Authoritative and recursive DNS services
  • Internal and external DNS architectures
• Administer and optimize Infoblox DDI (DNS, DHCP, IPAM) platforms
• Manage DNS zones, records, delegation, and resolution performance
• Implement DNS security controls:
  • DNSSEC
  • Response policy zones (RPZ)
  • DDoS protection strategies
• Integrate DNS services with Cloudflare for:
  • Public DNS hosting
  • CDN and traffic routing
  • Security (WAF, bot protection, rate limiting)
• Troubleshoot complex resolution issues across hybrid (on-prem/cloud) environments

PKI & Certificate Management

• Design and manage enterprise PKI solutions, including:
  • Internal Certificate Authorities (CAs)
  • Integration with public CAs
• Oversee full certificate lifecycle:
  • Request, issuance, renewal, revocation, and retirement
• Implement and maintain automation for certificate lifecycle management (e.g., ACME, APIs)
  • Integrate catalog items within ITSM platforms
  • Understand certificate renewal process/auto renewal
• Deploy and manage:
  • SSL/TLS certificates for web apps, APIs, and infrastructure
  • Mutual TLS (mTLS) where applicable
• Ensure compliance with organizational security policies and industry standards

Cloudflare Integration

• Administer and optimize Cloudflare services, including:
  • DNS hosting and record management
  • SSL/TLS configuration (Full/Strict modes, edge certificates)
  • CDN and performance tuning
• Configure and maintain:
  • Web Application Firewall (WAF)
  • Zero Trust / access controls (where applicable)
• Support hybrid DNS architectures across on-prem and Cloudflare edge

Automation & Engineering

• Develop automation for DNS and certificate management:
  • Infrastructure as Code (IaC) (e.g., Terraform, ARM, etc.)
  • API-based integrations (Infoblox, Cloudflare, DigiCert)
• Build monitoring and alerting for:
  • DNS resolution health
  • Certificate expiration
  • Security anomalies
• Standardize deployment patterns and operational runbooks

Operations & Support

• Provide L3 support and escalation for DNS and certificate-related incidents from MSP
• Help MSP conduct root cause analysis and implement corrective actions
• Maintain system availability and performance aligned with SLAs
• Participate in on-call rotation as needed

Required Qualifications

• 5+ years of hands‑on experience in:
  • DNS engineering (enterprise‑scale)
  • PKI / certificate lifecycle management
• Strong experience with:
  • Infoblox (DDI platform administration, NIOS‑X)
  • DigiCert (certificate issuance, automation, APIs)
  • Cloudflare (DNS, CDN, SSL/TLS, WAF)
  • Domain registrar management experience
• Deep understanding of:
  • DNS protocols and architecture
  • TCP/IP networking fundamentals
  • SSL/TLS handshake and certificate chains
• Experience troubleshooting:
  • DNS resolution failures
  • Certificate trust and validation issues
• Scripting/automation experience (PowerShell, Python, or similar)

Preferred Qualifications

• Experience with:
  • Hybrid cloud environments (Azure/AWS)
  • Microsoft Entra ID / Active Directory integration
• Familiarity with:
  • Certificate automation tooling
  • Zero Trust architecture
• Experience implementing DNS security controls (DNSSEC, RPZ)
• Infrastructure-as-Code experience (Terraform preferred)

Physical Job Requirements

The above statements are intended to describe the general nature and level of work being performed by employees assigned to this position, but they are not an exhaustive list of all the required responsibilities and skills of this position.

Benefits & Compensation

MiniMed offers a competitive salary and flexible benefits package. At MiniMed, we put people first. A commitment to our employees lives at the core of our values: We recognize their contributions. They share in the success they help create. We offer a wide range of benefits, resources, and competitive compensation plans designed to support you at every stage of your career and life.

About MiniMed

We want to make every day a better day for people living with diabetes. Our team of creative innovators around the globe share a passion for finding the simplest solutions to the problems that people with diabetes face on a daily basis. For more than 40 years, we've been redefining what's possible, from intelligent dosing systems designed for real life to predictive insights that stay a step ahead, and we're dedicated to continuing to support our customers through every step of their journey — meeting them where and how they need it.