Principal Engineer - PKI

Optiv; Bengaluru; On-site; INR 4,500,000 - 7,500,000; Full time

Job summary

Optiv Bengaluru is seeking a Principal PKI Engineer to lead enterprise PKI design and implementation across client and internal environments. You will drive certificate lifecycle management, automation, and governance with Venafi, KeyFactor, and Sectigo, shaping security architecture and operational excellence.

The role requires deep PKI expertise, strong collaboration with security and IT teams, and documentation of architectures and procedures.

Qualifications

• 8+ years of hands-on PKI management experience with Venafi and Sectigo
• Strong understanding of certificate lifecycle management and cryptographic protocols
• Familiarity with Azure and cloud-based certificate management

Responsibilities

• Lead design, implementation, and lifecycle management of enterprise PKI solutions using Venafi, KeyFactor and Sectigo
• Architect and manage certificate issuance, renewal, revocation, and automation across hybrid environments
• Collaborate with security, infrastructure, and application teams to ensure seamless PKI integration
• Provide technical leadership in PKI strategy, governance, and compliance
• Drive automation and scalability of certificate management processes
• Maintain detailed documentation for PKI architecture, configurations, and procedures

Skills

PKI management

Venafi

Sectigo

Cryptographic protocols

Identity security

PowerShell

Python

Bash

Azure

Linux/Windows

Education

Bachelor's degree in Computer Science or related field

Tools

KeyFactor

Sectigo

Job description

The Principal Engineer will be responsible for creation of procedures, implementation of processes and development of staff for managing and maintaining security systems across internal and client environments. The Principal Engineer will work closely with Management, Senior Engineers, Solution Architects, Senior Security Engineers, other Principal Security Engineers and clients to complete high profile, critical services to existing Managed Security Service clients. Serve as a subject matter expert and team lead, staying in tune with all client configuration issues and all internal projects.

How Youll Make an Impact

• Lead the design, implementation, and lifecycle management of enterprise PKI solutions using Venafi as the primary tool, along with KeyFactor and Sectigo.
• Architect and manage certificate issuance, renewal, revocation, and automation across hybrid environments.
• Collaborate with security, infrastructure, and application teams to ensure seamless integration of PKI services.
• Provide technical leadership in PKI strategy, governance, and compliance.
• Drive automation and scalability of certificate management processes.
• Conduct root cause analysis and remediation for PKI-related incidents.
• Evaluate and test new PKI technologies and upgrades.
• Maintain detailed documentation for PKI architecture, configurations, and operational procedures.

What Were Looking For

• 8+ years of hands-on experience in PKI management, with deep expertise in Venafi and Sectigo
• Strong understanding of certificate lifecycle management, cryptographic protocols, and identity-based security.
• Experience with KeyFactor, Sectigo, and other PKI platforms is a plus.
• Familiarity with Microsoft Azure and cloud-based certificate management.
• Bachelor’s degree in Computer Science, Information Security, or related field.
• Relevant certifications such as CISSP, CISM, or CCSK are preferred.
• Excellent written and verbal communication skills.
• Ability to work independently and collaboratively in a fast-paced environment.
• Proven track record of delivering secure and scalable PKI solutions.
• Understanding of network architecture and implementation is a must; ideal candidate will have worked with network security analysis.
• Excellent time management, reporting, and communication skills.
• Superior IT problem-solving skills.
• Knowledge of Linux and Windows Operating Systems
• An understanding of a wide array of server grade applications such as: DBMS, Exchange, DNS, SMTP, IIS, Apache, SharePoint, Active Directory, Identity Management, Patch Management, LDAP, SQL, and others
• Hands-on experience with automation using REST APIs and scripting languages (e.g., PowerShell, Python, Bash)
• This role demands the availability during US working hours (5 PM (IST) to 2 AM (IST))
• This role is a Work from Office role.