Enterprise PKI & Certificate Infrastructure Engineer

Tata Consultancy Services Limited; Phoenix (AZ); On-site; USD 110,000 - 120,000; Full time

Job summary

Tata Consultancy Services Limited seeks a mid-level PKI Certificate Infrastructure Engineer to design, deploy, administer, and maintain enterprise PKI and certificate infrastructure. You will manage the certificate lifecycle, CA infra, HSMs, cryptographic keys, automation, and monitoring across on-prem and cloud environments.

The role requires hands-on PKI experience, scripting ability, and collaboration with Cybersecurity, IAM, Cloud, and Network teams to ensure secure certificate solutions.

Qualifications

• Approximately 3-6 years of relevant infrastructure/security engineering experience.
• Hands-on exposure to PKI and certificate technologies in enterprise environments.
• Ability to collaborate with application, infrastructure, cloud, network, and cybersecurity teams.

Responsibilities

• Design, deploy, configure, and maintain enterprise PKI and CA infrastructure.
• Manage complete digital certificate lifecycle including enrollment, issuance, renewal, revocation.
• Administer Root CA, Intermediate/Issuing CA, templates, CRLs, and OCSP.
• Deploy and support HSMs to protect private keys and cryptographic assets.
• Automate certificate provisioning and lifecycle processes using scripting.
• Integrate PKI with Windows/Linux servers, AD, cloud, APIs, and networks.

Skills

PKI management

CA administration

HSMs

AD CS / enterprise PKI

Scripting (PowerShell Python)

Windows / Linux

TLS/SSL concepts

Tools

Keyfactor / Venafi / DigiCert

HSM vendors Thales / Entrust

SCEP / EST / ACME

Job description

Tata Consultancy Services Limited seeks a mid-level PKI Certificate Infrastructure Engineer to design, deploy, administer, and maintain enterprise PKI and certificate infrastructure. You will manage the certificate lifecycle, CA infra, HSMs, cryptographic keys, automation, and monitoring across on-prem and cloud environments.

The role requires hands-on PKI experience, scripting ability, and collaboration with Cybersecurity, IAM, Cloud, and Network teams to ensure secure certificate solutions.