PKI Administrator / Certificate management specialist

Tata Consultancy Services; Charlotte (NC); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Discretionary Annual Incentive

Comprehensive Medical Coverage

Parental Leaves

401K Plan

Certification & Training Reimbursement

Vacation & Holidays

Job summary

Tata Consultancy Services in Charlotte, NC seeks a PKI/Certificate Management Engineer to own the lifecycle of digital certificates and support PKI environments. You will drive enrollment, issuance, renewal, revocation, and automation, ensuring secure SSL/TLS deployment across servers, apps, and cloud.

The role requires 5+ years in certificate management, strong cryptography knowledge, and experience with ADCS, DigiCert, and Venafi. This position is on-site in Charlotte with competitive benefits.

Qualifications

• Bachelor's degree in Computer Science or related field.
• 5+ years of experience in certificate management or PKI operations.
• Strong understanding of PKI concepts, certificates, and cryptography.

Responsibilities

• Manage lifecycle of digital certificates, enrollment, issuance, renewal, revocation.
• Administer and support enterprise PKI environments and CAs.
• Monitor certificate health and address expiring/non-compliant certs.
• Implement certificate automation to reduce manual overhead.
• Ensure secure deployment of SSL/TLS certificates across servers and cloud.
• Perform certificate inventory and maintain ownership records.
• Troubleshoot certificate-related issues in apps, websites, and infra.
• Support cryptographic key management and HSM integrations.
• Enforce certificate/key management policies and standards.
• Coordinate with infra, cloud, app, and security teams for deployment.
• Support audits and compliance initiatives; develop dashboards for health.
• Familiarity with NIST, PCI-DSS, SOX, HIPAA, ISO 27001 standards.

Skills

PKI

SSL/TLS

CSR

CRL

OCSP

Encryption

Windows

Linux

Cloud

DNS

Load Balancers

Web Servers

App Servers

DevOps/CI-CD

Security Standards

Education

Bachelor of Computer Science

Tools

DigiCert

Sectigo

Entrust

Venafi

Keyfactor

AppViewX

ADCS (Active Directory Certificate Services)

Job description

• Manage the complete lifecycle of digital certificates, including enrollment, issuance, renewal, revocation, and expiration management.
• Administer and support enterprise PKI environments and Certificate Authorities (CAs).
• Monitor certificate health and proactively address expiring or non-compliant certificates.
• Implement and manage certificate automation solutions to reduce operational overhead.
• Ensure secure deployment of SSL/TLS certificates across servers, applications, network devices, APIs, and cloud environments.
• Perform certificate inventory management and maintain accurate records of certificate ownership.
• Troubleshoot certificate-related issues affecting applications, websites, and infrastructure services.
• Support cryptographic key management processes and HSM integrations.
• Enforce certificate and key management policies, standards, and procedures.
• Coordinate with infrastructure, cloud, application, and security teams to ensure proper certificate deployment.
• Support audits, regulatory requirements, and compliance initiatives.
• Develop dashboards and reports to provide visibility into certificate health and compliance status.
• Public Key Infrastructure (PKI)
• SSL/TLS Certificates
• Certificate Signing Requests (CSR)
• Certificate Revocation Lists (CRL)
• OCSP
• Encryption and Cryptographic Concepts
• Experience with Windows, Linux, cloud platforms, and enterprise network environments.
• Familiarity with DNS, Load Balancers, Web Servers, and Application Servers.
• Experience integrating certificate management with DevOps and CI/CD pipelines.
• Knowledge of security and compliance standards including NIST, PCI-DSS, SOX, HIPAA, and ISO 27001.

Job Description

Must Have Technical/Functional Skills

• Strong understanding of:
• Public Key Infrastructure (PKI)
• SSL/TLS Certificates
• Certificate Signing Requests (CSR)
• Certificate Revocation Lists (CRL)
• OCSP
• Encryption and Cryptographic Concepts

Roles & Responsibilities

• Manage the complete lifecycle of digital certificates, including enrollment, issuance, renewal, revocation, and expiration management.
• Administer and support enterprise PKI environments and Certificate Authorities (CAs).
• Monitor certificate health and proactively address expiring or non-compliant certificates.
• Implement and manage certificate automation solutions to reduce operational overhead.
• Ensure secure deployment of SSL/TLS certificates across servers, applications, network devices, APIs, and cloud environments.
• Perform certificate inventory management and maintain accurate records of certificate ownership.
• Troubleshoot certificate-related issues affecting applications, websites, and infrastructure services.
• Support cryptographic key management processes and HSM integrations.
• Enforce certificate and key management policies, standards, and procedures.
• Coordinate with infrastructure, cloud, application, and security teams to ensure proper certificate deployment.
• Support audits, regulatory requirements, and compliance initiatives.
• Develop dashboards and reports to provide visibility into certificate health and compliance status.

Strong Understanding Of

• Public Key Infrastructure (PKI)
• SSL/TLS Certificates
• Certificate Signing Requests (CSR)
• Certificate Revocation Lists (CRL)
• OCSP
• Encryption and Cryptographic Concepts
• Experience with Windows, Linux, cloud platforms, and enterprise network environments.
• Familiarity with DNS, Load Balancers, Web Servers, and Application Servers.
• Experience integrating certificate management with DevOps and CI/CD pipelines.
• Knowledge of security and compliance standards including NIST, PCI-DSS, SOX, HIPAA, and ISO 27001.

Generic Managerial Skills, If any

• 5+ years of experience in Certificate Management, PKI Administration, or Cybersecurity Operations.
• Hands-on experience with:
• Microsoft Active Directory Certificate Services (ADCS)
• DigiCert
• Sectigo
• Entrust
• Venafi
• Keyfactor
• AppViewX

TCS Employee Benefits Summary

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support: Maternal & Parental Leaves.
• Insurance Options: Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
• Time Off: Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.
• Salary Range: $110,000 - $140,000 a year

Qualifications:

BACHELOR OF COMPUTER SCIENCE