Senior Engineer (Certificate Management & Platform Operations )

finastra; Bengaluru; On-site; INR 3,500,000 - 6,500,000; Full time

Job summary

Finastra in Bengaluru, India, seeks a Senior Engineer for Certificate Management & Platform Operations. You will oversee the certificate lifecycle, administer Venafi and related PKI services, and drive automation to improve efficiency and reduce manual work.

The role collaborates with Infrastructure, Security, Cloud, and DevOps teams to deliver secure, scalable certificate management across Azure, AWS, and Kubernetes environments, while ensuring compliance and incident readiness.

Qualifications

• 5+ years of hands-on experience supporting Enterprise Certificate Management Platforms, PKI Services, or Cybersecurity Infrastructure Platforms.
• 3+ years hands-on experience administering Venafi Certificate Management Platform or similar enterprise certificate management solutions.
• Strong understanding of SSL/TLS certificates, PKI, cryptography fundamentals, and certificate governance practices.
• Experience supporting business-critical enterprise applications in large-scale global environments.
• ITIL Foundation Certification or equivalent familiarity.

Responsibilities

• Own and manage the complete certificate lifecycle including issuance, renewal, replacement, revocation, discovery, deployment, and retirement of enterprise certificates.
• Administer, configure, maintain, and continuously improve the Venafi Certificate Management Platform, PKI services, and related integrations.
• Design, develop, and implement automation solutions using PowerShell, Python, APIs, and workflow automation tools.
• Collaborate with Infrastructure, Network, Security, Cloud, Application, and DevOps teams to deliver secure, scalable certificate management services.
• Participate in the full service lifecycle: requirements, design, implementation, testing, deployment, support, and continuous improvement.
• Develop and maintain technical standards, procedures, governance controls, and knowledge documentation.
• Support cloud-based certificate management solutions across Azure, AWS, Kubernetes, and modern app environments.
• Monitor certificate health, compliance posture, and service performance; mitigate operational risks.
• Lead troubleshooting and resolution of certificate-related incidents and major incidents; conduct root cause analysis.
• Support audits and regulatory reviews with evidence and compliance reporting; prepare dashboards and KPIs.

Skills

Automation

PowerShell

Python

APIs

IT security

SSL/TLS

Governance

Leadership

Education

Bachelor's degree in IT/CS/Cybersecurity/Engineering

Tools

Venafi

PKI Services

Azure

AWS

Kubernetes

Job description

Who are we?

At Finastra, we're a global leader in financial services software, dedicated to expanding access to financial services and shaping what's next for the industry. Our technology powers mission-critical solutions across Lending, Payments and Universal Banking, supporting over 7,000 customers, including 80% of the world's top 50 banks, in more than 110 countries.

Reporting to the Manager, Infrastructure & System Operations , the Senior Engineer - Certificate Management & Platform Operations will possess hands-on experience with the administration, configuration, automation, and support of Venafi Certificate Management Platform and Public Key Infrastructure (PKI) Services and will be responsible for the maintenance, development, governance, and day-to-day operations of the enterprise certificate management ecosystem.

The candidate should have experience working in a diverse enterprise technology environment supporting critical security and infrastructure services and will provide technical leadership, engineering expertise, and strategic guidance in designing, implementing, automating, and supporting Venafi and enterprise certificate management solutions while aligning with industry best practices, security standards, compliance requirements, and operational excellence objectives.

The role will also be responsible for researching, planning, coordinating, and implementing automation, platform enhancement, governance, and modernization initiatives that improve service reliability, scalability, security, and operational efficiency.

Responsibilities & Deliverables

Your deliverables as a Senior Engineer - Certificate Management & Platform Operations will include, but are not limited to, the following:

• Own and manage the complete certificate lifecycle including issuance, renewal, replacement, revocation, discovery, deployment, and retirement of enterprise certificates.
• Administer, configure, maintain, and continuously improve the Venafi Certificate Management Platform , associated PKI services, and related integrations.
• Design, develop, and implement automation solutions using PowerShell, Python, APIs, and workflow automation tools to improve efficiency and reduce manual intervention.
• Collaborate with Infrastructure, Network, Security, Cloud, Application, and DevOps teams to deliver secure, scalable, and compliant certificate management services.
• Participate in the full service lifecycle including requirements gathering, design, implementation, testing, deployment, operational support, and continuous improvement.
• Develop and maintain technical standards, operational procedures, governance controls, and knowledge documentation for certificate management services.
• Support cloud-based certificate management solutions across Azure, AWS, Kubernetes, and modern application environments.
• Monitor certificate health, availability, compliance posture, and service performance while proactively identifying and mitigating operational risks.
• Lead troubleshooting and resolution of certificate-related incidents, service interruptions, and platform issues, including participation in Major Incident Management activities.
• Conduct root cause analysis and implement corrective and preventive actions to eliminate recurring issues and improve service resilience.
• Support internal audits, external audits, regulatory reviews, and security assessments by providing audit evidence and compliance reporting.
• Develop dashboards, KPIs, service metrics, and executive reporting to demonstrate service health, operational effectiveness, and risk reduction.
• Participate in Change Management, Problem Management, Incident Management, and Service Request Management processes in alignment with ITIL best practices.
• Evaluate new technologies, platform capabilities, and industry trends to support Finastra's certificate management roadmap and modernization strategy.
• Drive self-service capabilities, platform integrations, and automation opportunities to increase service maturity and customer experience.
• Maintain production and non-production environments while ensuring platform stability, security, and compliance.
• Mentor junior engineers and contribute to capability development, knowledge sharing, and operational excellence initiatives across the team.

Education

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Engineering, or related discipline.

Required Experience

• 5+ years of hands-on experience supporting Enterprise Certificate Management Platforms, PKI Services, or Cybersecurity Infrastructure Platforms .
• 3+ years of hands-on experience administering and supporting Venafi Certificate Management Platform or similar enterprise certificate management solutions.
• Strong understanding of SSL/TLS certificates, Public Key Infrastructure (PKI), cryptography fundamentals, and certificate governance practices.
• Experience supporting business-critical enterprise applications in large-scale global environments.
• ITIL Foundation Ce