PKI Architecture & Security Automation Specialist

Tata Consultancy Services Limited; Denver (CO); On-site; USD 110,000 - 120,000; Full time

Benefits offered by this job

Discretionary Annual Incentive

Medical Coverage

Parental Leaves

Certification & Training Reimbursement

Vacation & Holidays

Job summary

Tata Consultancy Services Limited in Denver, CO is seeking a seasoned PKI/Certificate Management specialist to own end-to-end SSL/TLS lifecycle, PKI platforms, and enterprise key management. You will configure, monitor, and automate certificate workflows across on-premises and cloud environments.

The role requires hands-on experience with Venafi, DigiCert, and cloud KMS tools, plus scripting in PowerShell or Python to streamline processes and ensure security compliance.

Qualifications

• 5+ years in certificate management and PKI administration.
• Strong PKI architecture and SSL/TLS expertise.
• Experience with multiple PKI tools and cloud KMS.
• Hands-on with HSMs and certificate lifecycle automation.

Responsibilities

• Manage end-to-end SSL/TLS certificate lifecycle.
• Administer PKI platforms (Microsoft CA, DigiCert, Venafi, Entrust, Sectigo).
• Manage Enterprise Key Management (EKM) and HSMs.
• Implement certificate discovery, monitoring, and expiration alerts.
• Support cloud KMS services (Azure Key Vault, AWS KMS, Google Cloud KMS).
• Ensure security standards and regulatory compliance.
• Automate certificate and key management with scripts and APIs.
• Collaborate with Security, Infra, DevOps teams.

Skills

Certificate management

PKI architecture

SSL/TLS protocols

X.509 certificates

CSR

Certificate Authority

Cryptographic algorithms

Education

Bachelor's in Computer Science

Tools

Venafi

DigiCert

Entrust

Sectigo

Microsoft PKI

Azure Key Vault

AWS KMS

HSM Thales

HSM SafeNet Luna

Job description

Tata Consultancy Services Limited in Denver, CO is seeking a seasoned PKI/Certificate Management specialist to own end-to-end SSL/TLS lifecycle, PKI platforms, and enterprise key management. You will configure, monitor, and automate certificate workflows across on-premises and cloud environments.

The role requires hands-on experience with Venafi, DigiCert, and cloud KMS tools, plus scripting in PowerShell or Python to streamline processes and ensure security compliance.