Senior PKI Engineer

Alike Thoughts; Dadri, Hyderabad; Hybrid; INR 900,000 - 1,500,000; Full time

Job summary

Alike Thoughts is seeking an experienced PKI specialist to own and optimize certificate lifecycle management and cryptographic services operations. You will assess current processes, design robust runbooks, and work with cross-functional teams to remediate expired or noncompliant certificates.

The role focuses on CA hierarchy, key protection, and adherence to security standards (PCI DSS/NIST). You will contribute to audit readiness and KPI reporting while advancing automation in certificate

Qualifications

• 5-8 years in cybersecurity/infrastructure security with strong PKI lifecycle experience.
• Prior experience in regulated enterprise environments preferred.
• CISSP/CISM/Security+ or vendor PKI certs preferred.

Responsibilities

• Assess current PKI certificate lifecycle processes, tools, inventories, dependencies, and pain points.
• Design and support certificate lifecycle operational processes: request, issuance, renewal, revocation, expiry management.
• Review CA hierarchy, certificate profiles, key protection patterns, ownership models, and control gaps.
• Define runbooks, exception handling, escalation paths, and reporting metrics for certificate management.
• Collaborate with application, infrastructure, and security teams to remediate expired, weak, or noncompliant certificates.
• Provide guidance on automation opportunities across discovery, renewal, and reporting workflows.
• Support audit, compliance, and risk reporting related to cryptographic controls.

Skills

PKI lifecycle management

Certificate inventory & expiry ops

CA hierarchy & key management

HSM key protection concepts

Cryptographic controls & encryption

Operational runbooks

Scripting/automation for certificate:

ITSM workflow integration

PCI DSS & NIST awareness

Audit evidence & KPI reporting

Tools

Venafi

DigiCert

Microsoft CA

Entrust CLM

Job description

Role Summary

Provide deep subject matter expertise for Public Key Infrastructure certificate lifecycle management and cryptographic services operations

Key Responsibilities

• Assess current PKIcertificate lifecycle processes tools inventories dependencies and operational pain points
• Design and support certificate lifecycle operational processes including request issuance renewal revocation inventory and expiry management
• Review CA hierarchy certificate profiles key protection patterns ownership models and control gaps
• Define operational runbooks exception handling escalation paths and reporting metrics for certificate management
• Work with application infrastructure and security teams to remediate expired weak or noncompliant certificates
• Provide guidance on automation opportunities across discovery renewal and reporting workflows
• Support audit compliance and risk reporting related to cryptographic controls

Primary Skills

• PKI and certificate lifecycle management
• Certificate inventory renewal and expiry operations
• CA hierarchy certificate profiles and key management fundamentals
• Hardware security module key protection concepts
• Cryptographic controls and encryption governance
• Operational runbook development

Secondary Skills

• Venafi DigiCert Microsoft CA Entrust or equivalent CLM platforms
• TLSSSL mTLS and application certificate dependency analysis
• Scriptingautomation for certificate reporting
• ITSM workflow integration
• PCI DSS NIST and regulatory control awareness
• Audit evidence and KPI reporting

Experience Qualifications

• 5-8 years in cybersecurityinfrastructure security with strong PKIcertificate lifecycle experience
• Prior experience in regulated enterprise environments preferred
• CISSP CISM Security cloud security or vendor PKI certifications preferred