Principal IT Technologist - PKI

Kornferry; Pune District; Hybrid; INR 2,500,000 - 4,500,000; Full time

Job summary

Kornferry in Pune, India seeks a senior PKI and DNS specialist to design and operate enterprise PKI and certificate management. The role covers internal CAs, public CA integration, and automation of lifecycle workflows across hybrid environments.

Responsibilities include Cloudflare DNS/SSL/TLS configuration, WAF and Zero Trust considerations, and IaC-oriented automation using Terraform and scripting to improve reliability and security posture.

Qualifications

• 8+ years in DNS engineering and PKI/certificate lifecycle management.
• Hands-on with Infoblox, DigiCert and Cloudflare in large-scale environments.
• Strong scripting skills (PowerShell, Python) and IaC tooling.

Responsibilities

• Design and manage enterprise PKI solutions including internal CAs and public CA integration.
• Oversee full certificate lifecycle: request, issuance, renewal, revocation and retirement.
• Automate certificate lifecycle management (ACME, APIs) and integrate with ITSM.
• Administer Cloudflare services: DNS, SSL/TLS, WAF, and WFO/Zero Trust where applicable.
• Develop DNS automation, IaC (Terraform/ARM) and API integrations with Infoblox, Cloudflare, and DigiCert.

Skills

DNS engineering

PKI / certificate management

Scripting/automation

Cloudflare

DigiCert

Infoblox

Terraform

Tools

Infoblox

DigiCert

Cloudflare

Job description

Role & responsibilities

PKI & Certificate Management

• Design and manage enterprise PKI solutions, including:
• Internal Certificate Authorities (CAs)
• Integration with public CAs
• Oversee full certificate lifecycle:
• Request, issuance, renewal, revocation, and retirement
• Implement and maintain automation for certificate lifecycle management (e.g., ACME, APIs)
• Integrate catalog items within ITSM platforms
• Understand certificate renewal process/auto renewal
• Deploy and manage:
• SSL/TLS certificates for web apps, APIs, and infrastructure
• Mutual TLS (mTLS) where applicable
• Ensure compliance with organizational security policies and industry standards

Cloudflare Integration

• Administer and optimize Cloudflare services, including:
• DNS hosting and record management
• SSL/TLS configuration (Full/Strict modes, edge certificates)
• CDN and performance tuning
• Configure and maintain:
• Web Application Firewall (WAF)
• Zero Trust / access controls (where applicable)
• Support hybrid DNS architectures across on-prem and Cloudflare edge

Automation & Engineering

• Develop automation for DNS and certificate management:
• Infrastructure as Code (IaC) (e.g., Terraform, ARM, etc.)
• API-based integrations (Infoblox, Cloudflare, DigiCert)
• Build monitoring and alerting for:
• DNS resolution health
• Certificate expiration
• Security anomalies
• Standardize deployment patterns and operational runbooks

Preferred candidate profile

• 8+ years of hands‑on experience in:
• DNS engineering (enterprise-scale)
• PKI / certificate lifecycle management
• Strong experience with:
• Infoblox (DDI platform administration, NIOS‑X)
• DigiCert (certificate issuance, automation, APIs)
• Cloudflare (DNS, CDN, SSL/TLS, WAF)
• Domain registrar management experience
• Deep understanding of:
• DNS protocols and architecture
• TCP/IP networking fundamentals
• SSL/TLS handshake and certificate chains
• Experience troubleshooting:
• DNS resolution failures
• Certificate trust and validation issues
• Scripting/automation experience (PowerShell, Python, or similar)

Preferred Qualifications

• Experience with:
• Hybrid cloud environments (Azure/AWS)
• Microsoft Entra ID / Active Directory integration
• Familiarity with:
• Certificate automation tooling
• Zero Trust architecture
• Experience implementing DNS security controls (DNSSEC, RPZ)
• Infrastructure-as-Code experience (Terraform preferred)