Technical Service Engineer - Active Directory

Fujitsu; Dadri, Pune District, Bengaluru; Hybrid; INR 1,000,000 - 1,800,000; Full time

Job summary

Fujitsu in India leads enterprise PKI operations, issuing and renewing certificates, and publishing CRLs. The role centers on Active Directory Certificate Services (ADCS), certificate templates, SCEP, CEP/CES, and SHA-1 to SHA-2 migration across CA servers.

Responsibilities include handling external certificates (Wildcard, Multi-Domain, Code Signing), managing NDES and OCSP services, and enforcing PKI security controls while using CLM tools for certificate management.

Qualifications

• Minimum 57 years of experience managing Microsoft PKI.
• Experience in MS-PKI - Active Directory Certificate Services (ADCS) BAU operations to manage certificate issuance, renewal, etc.
• Publish and manage Certificate Revocation Lists (CRL).
• Manage and publish Certificate Templates.
• Perform OS migration from legacy to latest version for Sub CA and Root CA.
• Migrate from SHA-1 to SHA-2 on CA servers.
• Manage CEP and CES roles.
• Renew SCEP Certificates.
• Manage NDES Server.
• Install and troubleshoot certificates on Web Servers.
• Manage OCSP Responder Server.
• External certificates management including Wildcard, Multi-Domain, and Code Signing certificates.
• Hands-on experience implementing standard security controls for PKI solutions.
• Experience with CLM tools for Certificate Management will be an added advantage.

Responsibilities

• Manage Microsoft PKI and ADCS BAU operations.
• Publish and manage CRLs and Certificate Templates.
• Handle Root CA and Sub CA monitoring and migration tasks.
• Migrate SHA-1 to SHA-2 across CA servers.
• Manage CEP/CES and SCEP certificate renewals.
• Operate NDES, OCSP, and SSL certificates on web servers.
• Manage external certificates such as Wildcard, Multi-Domain, and Code Signing certificates.

Skills

Active Directory Certificate Services

Tools

DigiCert

GlobalSign

Microsoft CA

SSL Certificate

Job description

Job Description

• Minimum 57 years of experience managing Microsoft PKI.
• Experience in MS-PKI - Active Directory Certificate Services (ADCS) BAU operations to manage certificate issuance, renewal, etc.
• Manage Root CA and monitor Sub CA.
• Publish and manage Certificate Revocation Lists (CRL).
• Manage and publish Certificate Templates.
• Perform operating system migration from legacy to the latest version for Sub CA and Root CA.
• Perform migration from SHA-1 to SHA-2 algorithm on both CA servers.
• Manage the role of Certificate Enrollment Policy (CEP) and Certificate Enrollment Services (CES).
• Renew SCEP Certificates.
• Manage NDES Server.
• Install and troubleshoot certificates on Web Servers.
• Manage OCSP Responder Server.
• Manage external certificates, including issuance and installation of different types of certificates such as:
  • Wildcard Certificates
  • Multi-Domain Certificates
  • Code Signing Certificates
• Hands-on experience in implementing standard security controls for PKI solutions.
• Experience with CLM tools for Certificate Management will be an added advantage.

Primary Skill

• Active Directory Certificate Services (ADCS)

Mandatory Skills

• DigiCert
• GlobalSign
• Microsoft CA
• SSL Certificate