PKI Sr Analyst - SME

PepsiCo; Philippines; On-site; PHP 1,200,000 - 2,000,000; Full time

Job summary

PepsiCo is seeking a seasoned IT security professional to manage end-to-end digital certificate and lifecycle management solutions across PKI, EKCM, and HSM architectures for a global environment. You will lead engineering, integrations, and operations, ensuring alignment with industry security standards and PepsiCo policies.

The role emphasizes automation, incident management, and support across certificate services, with collaboration across application teams and global regions to maintain

Qualifications

• BS/BTech in Engineering or related field
• 8+ years of overall IT experience
• 6+ years of Security experience
• 7+ years of PKI, EKCLM, and NHI Management experience
• 7+ years of PowerShell scripting experience
• 5+ years of experience with cloud platforms (Azure, AWS)
• 5+ years of API development and integration experience
• Good working knowledge of cryptographic and modern auth protocols
• Well versed with Certificate based authentication and device trust
• Well versed with Non-Human Identity management
• In depth knowledge of Active Directory Certificate Services (AD CS)
• In depth knowledge of CRL and OCSP and their functionality
• Familiarity with PKI and cryptographic terminology and management
• Knowledge of CLM tool such as Venafi, AppviewX, Keyfactor added advantage
• Hands on experience and Working knowledge of Thales HSM
• Hands on experience and working knowledge of public CA
• Good working knowledge of cloud platforms (Azure and AWS) and SaaS offerings for PKI and EKCLM
• Knowledge of Active Directory domain service
• Knowledge of scripting languages such as PowerShell, API based automation
• Knowledge of ITSM processes like request, incident, change management etc.

Responsibilities

• Lead PKI services across EKCM, HSM, and certificate lifecycle management.
• Drive requirements with application teams and ensure security standards.
• Mentor engineering and operations teams; meet SLAs.
• Design and implement new certificate service patterns and integrations.
• Drive automation for provisioning and monitoring of certificates.
• Maintain high availability and disaster recovery across regions.
• Educate stakeholders on certificate life cycle processes.
• Lead incident management and root-cause resolution within SLAs.

Skills

PKI management

PowerShell scripting

Azure

AWS

API integration

Thales HSM

AD CS

Venafi

AppviewX

Keyfactor

Public CA

Education

BS/BTech in Engineering

Tools

Venafi

AppviewX

Keyfactor

Thales HSM

Public CA

AD CS

Job description

Job Description:

Overview

This role will be responsible for managing end-to-end digital certificate and lifecycle management solutions across all supporting components. The role includes Engineering, Integrations, Operations, and maintenance of the global PKI and NHI environment, ensuring alignment with industry standards and best practices.

Responsibilities

At PepsiCo, you'll find the opportunity to grow your career, make an impact, and help shape what's next. As one of the world's leading food and beverage companies, our beloved brands—including Gatorade, Lay's, and Quaker—help create smiles with every sip and bite. Behind our products is a connected system that starts with how we source and grow ingredients alongside farmers and extends to how we make, move, and deliver products while driving positive impact for our business and communities.

Responsibilities:

• Lead the digital certificate services space, a digital form of identification where consumers, businesses and organizations can exchange data securely, using public key infrastructure (PKI), Enterprise Key and Certificate Lifecycle management (EKCM), Hardware Security Modules (HSM) solutions for global PepsiCo.
• Drive technical discussions to understand digital certificate services requirements while partnering with application teams who design and implement solutions.
• Ensure digital certificate services provided align with PepsiCo’s security standards and align with industry best practices.
• Manage the engineering and operations teams (people and work) for digital certificate services by mentoring junior members, ensuring SLAs are met, and ensuring tasks are properly completed.
• Manage the certificate services space end-to-end from designing solutions for services for new integrations and patterns, to implementing projects in the certificate services space, and providing sustained support across all products in the certificate services space.
• Drive automation initiatives for certificate services including certificate provisioning and monitoring for digital certificate services by identifying opportunities for enhancements and implementation with no issues.
• Maintain and enhance global solutions for the digital certificate area ensuring high availability and disaster recovery across regions with resiliency including planning and delivering upgrades.
• Provide guidance, educate key stakeholders on certificate life cycle processes and procedures.
• Lead incident management for digital certificate services across the solution stack driving root cause and resolution within service level agreement.

Qualifications

Technical Requirements:

• BS/BTech in Engineering or a related field
• 8+ years of overall IT experience
• 6+ years of Security experience
• 7+ years of PKI, EKCLM, and NHI Management experience
• 7+ years of PowerShell scripting experience
• 5+ years of experience with cloud platforms (Azure, AWS)
• 5+ years of API development and integration experience
• Good working knowledge of cryptographic and modern auth protocols
• Well versed with Certificate based authentication and device trust
• Well versed with Non-Human Identity management
• In depth knowledge of Active Directory Certificate Services (AD CS)
• In depth knowledge of CRL and OCSP and their functionality
• Familiarity with PKI and cryptographic terminology and management
• Knowledge of CLM tool such as Venafi, AppviewX, Keyfactor added advantage
• Hands on experience and Working knowledge of Thales HSM
• Hands on experience and working knowledge of public CA
• Good working knowledge of cloud platforms (Azure and AWS) and SaaS offerings for PKI and EKCLM
• Knowledge of Active Directory domain service
• Knowledge of scripting languages such as PowerShell, API based automation
• Knowledge of ITSM processes like request, incident, change management etc.

Non-technical requirements:

• Strong oral and written communications skills
• Ability to work within project timelines
• Deliver outcomes with a little supervision, must be a self-starter and self-motivator
• Proactive approach and enthusiasm for problem identification and solving
• Ability to think strategically and suggest creative solutions
• Ability to synthesize complex requirements into simple business practices
• Flexible and able to adapt to changing priorities

At the heart of PepsiCo are our people: professionals who bring curiosity, drive, and fresh thinking, working together to turn ideas into action. Across functions, teams, and markets, we collaborate to solve challenges, unlock new opportunities, and create meaningful impact for our consumers, customers, and communities.

No matter your role, you'll be part of a connected community where your contributions matter, your voice is heard, and your development is supported. With opportunities to grow, belong, and smile, PepsiCo offers more than a place to build your career—it offers the chance to help create what's next.