Security Analysis Senior Specialist

NTT DATA, Inc.; Dadri; On-site; INR 900,000 - 1,500,000; Full time

Job summary

NTT DATA, Inc. seeks an experienced Senior Venafi PKI Engineer to lead administration, automation, and governance of enterprise certificates across on-prem, cloud, and hybrid environments in Noida, UP, India.

The ideal candidate will specialize in Venafi TLS Protect, AD CS, and machine identity management while collaborating with Cybersecurity, Infra, Cloud, DevOps, and Network teams to minimize outages through automation.

Qualifications

• Experience administering Venafi Platform across on-prem, cloud, and hybrid environments.
• Strong knowledge of Venafi TLS Protect and RBAC controls.
• Expertise in certificate lifecycle automation and zero-touch PKI.
• Experience with AD CS and enterprise PKI management.
• Ability to collaborate with Cybersecurity, Infrastructure, Cloud, DevOps, Application, and Network teams.

Responsibilities

• Administer, configure, and maintain the Venafi platform across enterprise environments.
• Manage Venafi TLS Protect, Trust Protection Platform (TPP), and machine identity management solutions.
• Ensure platform availability, performance, scalability, and operational stability.
• Perform platform upgrades, patch management, and health monitoring.
• Manage Venafi administrative functions, policies, workflows, and RBAC controls.
• Integrate Venafi with Active Directory, ServiceNow, and CyberArk/BeyondTrust.

Skills

Venafi TLS Protect

Security governance

Certificate lifecycle automation

Machine identity management

PKI administration

Education

AD CS / PKI management

Tools

Venafi Platform Administration

TPP (Trust Protection Platform)

Active Directory Certificate Services (AD CS)

Public Certificate Authorities

Internal Certificate Authorities

Cloud-based Certificate Services

Windows Servers

Linux Servers

Kubernetes Clusters

Job description

Req ID: 391372

NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us.

If you want to be part of an inclusive, adaptable, and forward-thinking organization,

We are currently seeking a Security Analysis Senior Specialist to join our team in Noida, Uttar Pradesh (IN-UP), India (IN).

Job Description: Senior Venafi PKI Engineer

Job Summary

We are seeking an experienced Senior Venafi PKI Engineer to lead the administration, automation, governance, and lifecycle management of enterprise digital certificates using the Venafi Platform. The role will be responsible for maintaining a Zero-Touch PKI framework, ensuring automated certificate discovery, issuance, renewal, revocation, and compliance across on-premise, cloud, and hybrid environments.

The ideal candidate will possess strong expertise in Venafi TLS Protect, Enterprise PKI, Active Directory Certificate Services (AD CS), certificate lifecycle automation, machine identity management, and security governance. This role will work closely with Cybersecurity, Infrastructure, Cloud, DevOps, Application, and Network teams to secure machine identities and eliminate certificate-related outages through automation.

Key Responsibilities

Venafi Platform Administration

• Administer, configure, and maintain the Venafi platform across enterprise environments.
• Manage Venafi TLS Protect, Trust Protection Platform (TPP), and machine identity management solutions.
• Ensure platform availability, performance, scalability, and operational stability.
• Perform platform upgrades, patch management, and health monitoring activities.
• Manage Venafi administrative functions, policies, workflows, and RBAC controls.

Zero-Touch Certificate Lifecycle Management

• Support and Maintenance of Zero-Touch certificate lifecycle management processes.
• Automate certificate discovery, enrollment, issuance, renewal, installation, and revocation.
• Ensure proactive replacement of expiring certificates with minimal manual intervention.
• Manage certificate inventories across enterprise applications, servers, databases, load balancers, and cloud workloads.
• Eliminate certificate-related service outages through automation and governance controls.

Enterprise PKI Management

• Integrate and manage enterprise PKI environments including:
• Microsoft Active Directory Certificate Services (AD CS)
• Public Certificate Authorities
• Internal Certificate Authorities
• Cloud-based Certificate Services
• Manage root CA and subordinate CA integrations.
• Maintain certificate trust chains and PKI security standards.
• Provide technical oversight for certificate authority architecture and governance.

Machine Identity Management

• Manage machine identities across:
• Windows Servers
• Linux Servers
• Cloud Platforms
• Containers
• Kubernetes Clusters
• Network Devices
• Load Balancers
• Web Servers
• Establish and maintain enterprise machine identity governance practices.
• Discovery and monitoring of unmanaged certificates.

Security & Compliance

• Define and enforce certificate security policies and governance standards.
• Support audit, compliance, and regulatory requirements.
• Perform certificate risk assessments and remediation activities.
• Identify weak, expired, or non-compliant certificates and implement corrective actions.
• Ensure compliance with enterprise security standards and PKI best practices.

Integration & Automation

• Integrate Venafi with:
• Active Directory
• ServiceNow
• CyberArk/BeyondTrust