Systems Engineering Specialist

NTT DATA BUSINESS SOLUTIONS; Dadri; On-site; INR 1,200,000 - 1,900,000; Full time

Job summary

NTT DATA BUSINESS SOLUTIONS in Noida is seeking a PKI and Encryption Specialist to design, implement, and manage enterprise PKI and cryptographic systems. You will oversee certificate lifecycles and key governance across users, servers, and IoT devices.

The role emphasizes modern cryptographic standards, post-quantum readiness, and seamless integration with cloud PKI services. Collaborate with security and IT teams to ensure secure communications and data integrity.

Qualifications

• Design and manage enterprise PKI programs and cryptographic systems.
• Oversee certificate lifecycle for users, servers, and IoT devices.
• Govern cryptographic keys end-to-end, including HSM usage.

Responsibilities

• Maintain and support enterprise PKI solutions (e.g., ADCS, EJBCA, Entrust).
• Oversee certificate issuance, renewal, revocation, and auto-enrollment.
• Manage keys lifecycle, distribution, and secure storage (HSM).
• Automate enrollment/renewal with SCEP/EST/REST APIs.

Skills

TLS/SSL

AD/LDAP

PKI management

HSM

Automation (SCEP/EST/REST)

Policy & CPS (NIST/FIPS)

Post-quantum readiness

PKIaaS/cloud PKI

Tools

Microsoft ADCS

PrimeKey EJBCA

Entrust

Thales CipherTrust

Gemalto KeySecure

HashiCorp Vault

AWS Certificate Manager

Azure Key Vault

Job description

The PKI and Encryption Specialist is responsible for the design, implementation, and daily management of the organization's Public Key Infrastructure (PKI) and cryptographic systems. You will ensure secure communications and data integrity by managing the full lifecycle of encryption keys and digital certificates. We are currently seeking a Systems Engineering Specialist to join our team in Noida.

Responsibilities

• Infrastructure Management: Maintain and support enterprise-level PKI solutions (e.g., Microsoft ADCS, PrimeKey EJBCA, or Entrust).
• Certificate Lifecycle: Oversight of requesting, issuing, renewing, and revoking X.509 digital certificates for users, servers, and IoT devices.
• Key Governance: Manage cryptographic keys throughout their lifecycle-including generation, distribution, and secure storage-often using Hardware Security Modules (HSMs) like Thales or Entrust.
• Automation: Implement automated certificate enrollment and renewal processes using protocols like SCEP, EST, or REST APIs to prevent service outages caused by expired certificates.
• Policy Compliance: Develop and enforce Certificate Policy (CP) and Certification Practice Statements (CPS) to ensure alignment with industry standards like NIST or FIPS.
• Crypto-Agility: Lead efforts to transition from legacy algorithms (e.g., SHA-1) to modern standards and prepare for post-quantum cryptography.

Technical Skills Required

• Cryptographic Protocols: Deep understanding of TLS/SSL, SSH, PGP, and IPsec.
• Identity Management: Experience with Active Directory (AD), LDAP, and their integration with PKI for auto-enrollment.
• Encryption Platforms: Hands-on experience with tools like Gemalto KeySecure, Thales CipherTrust, or HashiCorp Vault.
• Cloud Security: Familiarity with cloud-based PKI services (e.g., AWS Certificate Manager, Azure Key Vault) and PKI as a Service (PKIaaS) models.

Experience

• 5+ years of relevant exp. is required.