Senior PKI & Certificate Infrastructure Engineer

Tata Consultancy Services Limited; Taguig; On-site; PHP 1,000,000 - 2,000,000; Full time

Job summary

Tata Consultancy Services Limited seeks an experienced PKI Engineer to manage enterprise PKI, certificate lifecycle, and HSM operations across the Bank environment. You will administer, monitor, and improve digital certificate infrastructure, ensuring security, availability, and regulatory compliance.

The role requires hands-on experience with X.509, SSL/TLS, AD CS, and automation using PowerShell/Python, with strong problem-solving and documentation skills for ongoing operations and

Qualifications

• 5+ years hands-on PKI, cryptography, or certificate management.
• Strong troubleshooting of certificate, SSL/TLS, trust chains, and cryptographic services.
• Experience operating highly available security infrastructure.
• Analytical, documentation, stakeholder-management and RC/mcc skills.
• Willingness to support incidents outside standard hours when required.

Responsibilities

• Perform daily PKI, certificate, and health monitoring administration.
• Manage complete certificate lifecycle: discovery, enrollment, issuance, renewal, revocation, retirement.
• Administer X.509 certs, SSL/TLS, trust stores, CRLs, and OCSP services.
• Coordinate renewals to prevent service disruption.
• Operate Thales/UtliHSM platforms; manage key storage, rotation, backup.
• Develop automation for PKI/HSM operations using PowerShell/Python.
• Integrate PKI with apps via APIs and standard protocols.
• Monitor availability, capacity, security events, and audit logs; perform incident analysis.
• Maintain SOPs, runbooks, inventories, change records, and audit evidence.
• Support change control, DR testing, audits, and on-call PKI services.

Skills

Enterprise PKI operations

X.509/SSL/TLS expertise

AD CS / enterprise CA

HSM and key management

Automation scripting (PowerShell)

Automation scripting (Python)

Windows Server administration

Linux administration

Incident/problem/change management

Regulatory evidence management

Tools

PowerShell

Python

Windows Server

Linux

Job description

Tata Consultancy Services Limited seeks an experienced PKI Engineer to manage enterprise PKI, certificate lifecycle, and HSM operations across the Bank environment. You will administer, monitor, and improve digital certificate infrastructure, ensuring security, availability, and regulatory compliance.

The role requires hands-on experience with X.509, SSL/TLS, AD CS, and automation using PowerShell/Python, with strong problem-solving and documentation skills for ongoing operations and