Senior Security Engineer PKI Cryptography L3

Alike Thoughts; Dadri, Hyderabad; On-site; INR 3,500,000 - 7,500,000; Full time

Job summary

Alike Thoughts is seeking a Senior Security Engineer specialized in PKI and cryptography to lead certificate lifecycle management, cryptographic services automation, and operational support. The role focuses on enterprise PKI design, CA/RA, HSM integrations, and post-quantum readiness under security architecture leads.

With 10+ years in information security, you will implement approved designs, troubleshoot complex certificate issues, and drive automation using PowerShell, Python, and IaC.

Qualifications

• 10+ years in information security infrastructure or security engineering.
• At least 5 years supporting PKI certificate management or related security technologies.
• Bachelor's degree in CS / cybersecurity / IT or equivalent practical experience.

Responsibilities

• Administer, monitor, and troubleshoot PKI services and certificate lifecycle platforms.
• Implement designs for CA, RA, HSM integrations, and OCSP/CRL components.
• Handle enrollment, issuance, renewal, rotation, revocation, and inventory.
• Support TLS client authentication, code signing, and machine identity use cases.
• Investigate certificate failures, trust chains, keystores, and interoperability issues.
• Build certificate automation using ACME, PowerShell, Python, and IaC tools.
• Onboard apps and cloud teams to centralized certificate management and self-service.
• Collaborate with DigiCert, AD CS, Azure, AWS, Kubernetes, KMS, and ServiceNow integrations.
• Manage HSM and cloud KMS activities including rotation, backup, and monitoring.
• Apply algorithms, certificate profiles, TLS settings; advance TLS modernization.
• Contribute to post-quantum readiness and hybrid cryptography initiatives.

Skills

PKI expertise

Certificate management

Automation scripting

Cloud platforms

TLS/SSL knowledge

Education

Bachelor's degree in CS / cybersecurity / IT

Tools

DigiCert Trust Lifecycle Manager

Microsoft AD CS

Azure

AWS

Kubernetes

Key Vaults

ServiceNow

Job description

Job Title Senior Security Engineer PKI Cryptography L3

This is a handson technical role requiring experience in enterprise PKI certificate lifecycle management cryptographic services automation and operational support The position supports internal and external PKI services implements approved designs resolves complex certificate issues and contributes to postquantum readiness activities under the direction of security architecture leaders

Work Location Pune or Chennai

Shift Timings Flexible to support 24x7 global teams planned maintenance oncall coverage and critical escalations

Key Responsibilities

Administer maintain monitor and troubleshoot internal and external PKI services and enterprise certificate lifecycle platforms

Implement approved designs and standards for Certificate Authorities Registration Authorities HSM integrations certificate repositories OCSP CRL and related components

Perform certificate enrollment approval issuance deployment renewal rotation revocation ownership updates inventory and expiration remediation

Support public and private TLS client authentication code signing device workload and machine identity certificate use cases

Investigate certificate failures trust chain issues TLS configuration keystores OCSP CRL private key handling and interoperability problems

Build and support certificate automation using ACME APIs agents agentless methods PowerShell Python and infrastructureascode tools

Assist application infrastructure and cloud teams with onboarding to centralized certificate management and approved selfservice capabilities

Support integrations with DigiCert Trust Lifecycle Manager Microsoft AD CS Azure AWS Kubernetes key vaults secrets platforms CICD pipelines monitoring and ServiceNow

Support HSM and cloud KMS activities including key generation access control rotation backup recovery and operational monitoring

Apply approved algorithms key sizes certificate profiles TLS settings and key lifecycle requirements

Contribute to TLS modernization and remediation of weak unsupported expired or noncompliant cryptographic configurations

Research NIST postquantum standards vendor capabilities hybrid cryptographic approaches and platform readiness

Support proofs of concept and pilots for hybrid or quantumresistant PKI certificates signing key management and secure communications

Document compatibility findings migration dependencies implementation steps operating procedures support runbooks and recovery procedures

Support incidents problems changes maintenance activities audit evidence collection control testing risk remediation and security exceptions

Skills and Qualifications

Work Experience Minimum 10 years of experience in information security infrastructure systems engineering or security engineering including at least 5 years supporting PKI certificate management key management or related security technologies

Education Bachelors degree in computer science cybersecurity engineering information technology or a related field or equivalent practical experience

Required Skills

Strong practical knowledge of X509 certificates TLS certificate chains trust stores enrollment renewal revocation OCSP CRL keystores and private key handling

Handson experience with DigiCert Trust Lifecycle Manager Microsoft AD CS cloud certificate services or comparable PKI technologies

Experience troubleshooting PKI and certificate issues in onpremises and cloud environments

Experience with ACME APIs PowerShell Python infrastructure as code CICD or other automation technologies

Experience supporting Azure AWS Kubernetes key vaults secrets management HSM cloud KMS or related platforms

Working knowledge of ITIL practices change management incident management technical documentation and ServiceNow

Ability to independently manage assigned technical deliverables and communicate clearly with global technical teams

Good to Have Skills

Familiarity with TLS 13 code signing digital signing machine identity NonHuman Identity security and certificate discovery tools

Awareness of NIST postquantum cryptography standards hybrid cryptography cryptoagility Cryptographic Bill of Materials concepts and migration planning

Experience with cryptographic inventory compliance monitoring policy validation audit support or disaster recovery testing

Relevant security cloud PKI automation or vendor certifications

Soft Skills

Strong communication skills Clearly communicate technical findings actions risks and status to team members and partner teams

Analytical and troubleshooting mindset Identify root causes evaluate evidence and follow structured troubleshooting and remediation steps

Ownership and reliability Manage assigned work through completion