Senior PKI Engineer

Cloudxtreme; Chennai District, Bengaluru; On-site; INR 1,000,000 - 1,800,000; Full time

Job summary

Cloudxtreme seeks a PKI and certificate lifecycle engineer to lead issuance, renewal, revocation, and monitoring of digital certificates across enterprise environments.

You will implement PKI security policies, manage key storage, and collaborate with Security/Infra/DevOps to integrate PKI into CI/CD pipelines. Experience with AD CS, ACM, and Venafi is essential.

Qualifications

• Experience managing PKI and certificate lifecycle across enterprise environments.
• Strong understanding of encryption standards and cryptographic protocols.
• Hands-on experience with AWS ACM and cloud certificate services.

Responsibilities

• Lead issuance, renewal, revocation, and monitoring of digital certificates.
• Design and enforce PKI security policies and key management practices.
• Collaborate with Security, Infra, and DevOps teams to integrate PKI into CI/CD pipelines.
• Establish reporting and auditing for certificate usage and expirations.

Skills

PKI management

Certificate lifecycle

TLS/SSL

X.509

RSA/ECC/SHA

Cloud security

Tools

AWS Certificate Manager (ACM)

Venafi

AD CS (Active Directory Certificate Services)

Job description

Lead and manage certificate lifecycle operations, including issuance, renewal, revocation, and monitoring of digital certificates across enterprise environments.

Demonstrate deep expertise in encryption standards, cryptographic protocols, and PKI components such as X.509 certificates, RSA, ECC, and SHA algorithms.

Administer and integrate Certificate Authorities (CAs) including public and private CAs, with a strong understanding of trust models and hierarchical PKI structures.

Hands‑on experience with AWS Certificate Manager (ACM) and other cloud‑native certificate services for secure deployment and management of TLS/SSL certificates.

Implement and maintain certificate services in multi‑cloud environments, including AWS, Azure, and other public cloud platforms, ensuring compliance and security best practices.

Configure and manage Active Directory Certificate Services (AD CS) for enterprise certificate issuance, group policies, and auto‑enrollment.

Develop and maintain automation scripts using PowerShell, Python, or Bash to streamline certificate operations and reduce manual overhead.

Design and enforce security policies related to PKI, including key management, certificate validation, and secure storage of private keys.

Establish robust reporting and auditing mechanisms for certificate usage, expiration tracking, and compliance with internal and external regulations.

Collaborate with security, infrastructure, and DevOps teams to integrate PKI solutions into CI/CD pipelines, applications, and network infrastructure.

Strong knowledge of Venafi.

Working shift -> Regular shift (2:00 pm to 10:30pm). Must be flexible to different shift pattern per business needs.