Senior Analyst - Application Programing

Bank of America; Hyderabad; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Bank of America is seeking a Senior PKI Engineer to design and operate enterprise PKI services with a focus on AD CS, certificate lifecycle and automation. You will implement secure workflows across Windows and Linux systems, integrate with Venafi platforms, and collaborate with DevOps and security teams.

The role requires 5+ years of PKI experience, strong scripting skills in PowerShell/C#, and excellent problem-solving abilities.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field
• 5+ years of PKI engineering and certificate lifecycle management
• Strong scripting with PowerShell/C# and production-quality code
• Deep knowledge of encryption technologies (PKI, TLS, cryptography)
• Experience with API integrations and CI/CD pipelines

Responsibilities

• Design and build enterprise-grade PKI services and certificate lifecycle automation
• Develop robust automation code (PowerShell, C#, .NET) for certificate workflows
• Architect API-driven automation frameworks using Venafi APIs
• Automate provisioning, renewal, revocation and backup/restore processes
• Collaborate with DevOps, IAM, and security teams to embed automation
• Troubleshoot, debug and resolve complex PKI issues across Windows and Linux
• Drive automation-first approaches and continuous improvement

Skills

PowerShell

C#

Venafi TPP

PKI

Certificate lifecycle

Windows Server

RHEL/Linux

Automation

Education

Bachelor’s degree in Computer Science or Information Security

Tools

Venafi TPP

Venafi APIs

Job description

Job Description: About Us At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits. We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve. Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Global Business Services

Global Business Services delivers Technology and Operations capabilities to Lines of Business and Staff Support Functions of Bank of America through a centrally managed, globally integrated delivery model and globally resilient operations. Global Business Services is recognized for flawless execution, sound risk management, operational resiliency, operational excellence and innovation. In India, we are present in five locations and operate as BA Continuum India Private Limited (BACI), a non‑banking subsidiary of Bank of America Corporation and the operating company for India operations of Global Business Services.

Process Overview

Senior PKI Engineer to design, implement, and operate enterprise-grade Public Key Infrastructure (PKI) services with a strong focus on Microsoft Active Directory Certificate Services (AD CS) and Active Directory (AD) integration. Handson implementation and integration knowledge of certificate lifecycle management, CA hierarchy governance, enrollment automation, HSM‑backed key protection, CA backup restore, migration and integration with platforms such as Windows Server, Linux, network/security devices, cloud providers, MDM/EPP, and zero‑trust tooling. Subject matter expert for cryptographic standards, certificate-based authentication, and PKI security controls across the organization.

Job Description

This job is responsible for developing and delivering complex requirements to accomplish business goals. Key responsibilities of the job include ensuring that software is developed to meet functional, non-functional and compliance requirements, and solutions are well designed with maintainability/ease of integration and testing built‑in from the outset. Job expectations include a strong knowledge of development and testing practices common to the industry and design and architectural patterns.

Responsibilities

• Design and build from scratch scalable certificate lifecycle automation solutions (provisioning, renewal, revocation) using Venafi TPP and custom‑developed tooling.
• Develop robust, reusable code (PowerShell, C#, or similar) to automate complex certificate workflows, system integrations, and backend processes.
• Architect and implement API-driven automation frameworks leveraging Venafi APIs and enterprise integrations.
• Replace manual or ad hoc processes with fully automated, self-service solutions aligned to engineering best practices.
• Own the end-to-end design, development, and deployment of automation patterns, including error handling, observability, and resiliency.
• Lead the development of standardized automation pipelines and reusable components for enterprise adoption.
• Perform Venafi platform upgrades, patching, and enhancements with a focus on automation, repeatability, and minimal manual intervention.
• Collaborate with DevOps, IAM, Engineering, and Operations teams to embed automation into application onboarding and CI/CD pipelines.
• Troubleshoot and resolve complex issues across Windows Server, RHEL/Unix, and distributed environments.
• Drive technical decisions and champion an automation-first, engineering‑led approach across teams.
• Operate independently with a high degree of ownership, proactively identifying opportunities to engineer solutions rather than apply manual fixes.

Requirements

Education : Bachelor’s degree in Computer Science, Information Security, or a related field Certifications If Any : NA Experience Range : 5+ years Foundational skills 5+ years of experience in PKI engineering and certificate lifecycle management. Proficient in the ability to design and build custom automation solutions from scratch, not just modify or maintain existing scripts or tools. Strong expertise in software development and scripting (PowerShell, C#, or similar) with a focus on clean, maintainable, production-quality code. Deep understanding of encryption technologies (PKI, TLS, symmetric/asymmetric cryptography, certificate authorities). Hands‑on experience building API integrations and automation frameworks, preferably with Venafi APIs. Experience integrating certificate automation into CI/CD pipelines and infrastructure-as-code workflows. Strong knowledge of Windows Server, RHEL/Linux, IIS, and networking protocols (TCP/IP, DNS, HTTP, SSH). Experience with Venafi TPP, TLS Protect, or similar enterprise certificate management platforms. Demonstrated ability to translate complex problems into automated, scalable engineering solutions. Strong troubleshooting, debugging, and root‑cause analysis skills. Excellent communication skills with the ability to articulate technical designs and influence adoption. Ability to manage multiple priorities in a fast‑paced, evolving environment. Self-starter mindset with high curiosity and comfort operating in ambiguity.

Desired skills

Experience designing enterprise-scale automation frameworks or platforms (beyond single-use scripts). Familiarity with cloud-based PKI and automation in AWS, Azure, or GCP environments. Experience with infrastructure-as-code tools (Ansible, Terraform, etc.) and building reusable automation playbooks. Experience with containerized environments and modern deployment patterns. Exposure to platform engineering, developer enablement, or self-service automation models. Certifications in PKI, Venafi, or related security technologies. Experience working in Agile and DevOps environmen

Work Timings

1.30pm to 10.30 pm

Job Location

Hyderabad/Chennai

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day. One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well‑being. Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization. Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!

Partnering Locally

Learn about some of the ways Bank of America is making a difference in the communities we serve.

Global Impact

Learn about the six areas that guide Bank of America’s efforts to help make financial lifes better for customers, clients, communities and our teammates.

Opportunity and Inclusion

Each employee bring unique skills, background and opinions. We see opportunity and inclusion as our platform together function?? - a key component process on ...