Certificate Lifecycle/ Pki Engineer With Venafi Expertise

Tata Consultancy Services; Chicago (IL); On-site; USD 120,000 - 130,000; Full time

Benefits offered by this job

Discretionary Annual Incentive

Comprehensive Medical Coverage

401K Plan

Certification & Training Reimbursement

Vacation and Holidays

Job summary

Tata Consultancy Services Limited in Chicago, IL is seeking an Engineer to lead identity-centric security initiatives and drive modern authentication solutions. You will work across teams to implement PKI, certificate lifecycle, and zero-trust patterns in enterprise environments.

The role requires hands-on experience with Azure, Kubernetes, and DevSecOps practices, plus strong communication to manage stakeholders and align security with business goals.

Qualifications

• Deep PKI and certificate management knowledge.
• Experience with Azure, Kubernetes, and cloud security.
• Strong communication and stakeholder management skills.

Responsibilities

• Lead identity and access management projects for enterprise environments.
• Design and implement zero-trust security patterns and MFA solutions.
• Collaborate with cross-functional teams to integrate security into CI/CD.
• Provide security solutions for cloud-based microservices and apps.

Education

Bachelor of Computer Science

Tools

Azure

Kubernetes

Kafka

Azure DevOps

Office 365

Job description

Job Description

Must Have Technical/Functional Skills

• PKI & Cryptography
• Public Key Infrastructure (PKI)
• X.509 Certificates
• TLS/SSL
• Certificate Authorities (CA)
• Certificate Revocation Lists (CRL)
• OCSP
• Key Management
• Hardware Security Modules (HSM)
• Code Signing Certificates
• Root and Intermediate CA Management
• Venafi Expertise
• Venafi Trust Protection Platform (TPP)
• Venafi SaaS
• Certificate Discovery
• Certificate Automation o Venafi APIs
• Adaptable Apps
• Native Drivers
• Reporting and Governance
• Certificate Lifecycle Workflows
• Platforms & Integrations
• Windows IIS
• Linux/Unix
• Microsoft Azure
• Azure Key Vault
• Kubernetes
• F5 Load Balancers
• Apache
• Tomcat
• WebLogic
• Kafka
• Solace
• Ping Federate
• ServiceNow Integrations
• DevOps & Automation
• GitHub Actions
• Azure DevOps
• CI/CD Pipelines
• PowerShell
• Python
• REST APIs
• Ansible
• Infrastructure Automation
• Security Domains
• Authentication
• Authorization
• Identity & Access Management
• Secrets Management
• Zero Trust Principles
• Cloud Security
• Security Monitoring
• Strong understanding of PKI architecture and certificate lifecycle processes.
• Experience implementing certificate automation patterns and DevSecOps integrations.
• Experience supporting enterprise-scale certificate environments.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent communication and stakeholder management skills.

Roles & Responsibilities

• Lead Identity centric Workforce Security team to develop authentication and access management solutions
• Drive the development of identity solutions, access patterns, modern security protocols, practicing Zero trust, least privileged, defense in depth principles
• Good understanding of AI concepts, Patterns and impact on identity and access management domain
• Participate and engage in AI adoption with Identity focus, knowledge and understanding of Entra ID agentic Identity, authentication flows and Patterns
• Review and provide feedback on Identity and access management related security solutions proposed by stakeholders and can provide consultation to the partners and IT Management
• In-depth knowledge and experience on Entra ID, EPM, Sentinel, Azure, AWS Security
• Knowledge on Okta, PingFederate, Entitlement management solutions
• Strong knowledge on Identities management on Azure AD with OAuth, OIDC, SAML, SSO, MFA, Conditional access policies, MFA, Ker beros, LDAP, Identity Federations etc.
• Experience in providing security solutions for Java based Micro services, React based frontends and Android/iOS based mobile applications on the Azure
• Hands-of experience in JWT, session handling, Code signing, Certificate authentication, TLS/SSL, API Security, Application registration, application integration scenarios etc.
• Awareness of API Management, Firewalls, DLP, VPNs, DNS, Azure Defender, MCAS, Sentinel, WAFs, Application Gateways, NSGs, App Proxy, Radius clusters, CDN etc.
• Good understanding of Cloud Infrastructure Entitlement Management solution (CIEM) to ensure smooth remediation of toxic combinations, high risk entitlements etc.
• Understanding and application of threat modeling concepts and methodologies
• Understanding of Applications security, OWASP standards, security best practices, browser compatibilities/storages/cookies
• Acts as Workforce cybersecurity expert to in solutions spanning end user computing, proxy solutions, MFA, SSO, conditional accesses, Passwordless, Yubikey, bio-metric solutions, identity and governance scenarios, Secrets Management, automation, role based access control, Privileged identity management, Just in time accesses etc.
• Participates in solutions to support- token handling, OIDC/ OAuth flows, authorization patterns, identity federation, cloud architectures, cryptography, cloud native services, cloud security etc.
• Deeper understanding on Cloud Security areas such as Policies, RBAC, activities, identities, privileged access management etc.
• Ability to support operations in troubleshooting complex identity scenarios with hands-on experience on Sentinel/KQL/Audit logs etc.
• Good understanding of concepts related to docker Security, container orchestrations/Kubernetes

TCS Employee Benefits Summary:

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support: Maternal & Parental Leaves.
• Insurance Options: Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
• Time Off: Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.

Location

Chicago, IL

Function

TECHNOLOGY

Role

Engineer

ID

432776

Skills

Kafka | Microsoft Azure

Salary Range

$120,000 - $130,000 a year

Salary Range

$120,000 - $130,000

Desired Candidate Profile

Qualifications

BACHELOR OF COMPUTER SCIENCE