Pki Architecture Support Analyst

Tata Consultancy Services; Denver (CO); On-site; USD 110,000 - 120,000; Full time

Benefits offered by this job

Discretionary Annual Incentive

Medical Coverage

Parental Leaves

Certification & Training Reimbursement

Vacation & Holidays

Job summary

Tata Consultancy Services Limited in Denver, CO is seeking a seasoned PKI/Certificate Management specialist to own end-to-end SSL/TLS lifecycle, PKI platforms, and enterprise key management. You will configure, monitor, and automate certificate workflows across on-premises and cloud environments.

The role requires hands-on experience with Venafi, DigiCert, and cloud KMS tools, plus scripting in PowerShell or Python to streamline processes and ensure security compliance.

Qualifications

• 5+ years in certificate management and PKI administration.
• Strong PKI architecture and SSL/TLS expertise.
• Experience with multiple PKI tools and cloud KMS.
• Hands-on with HSMs and certificate lifecycle automation.

Responsibilities

• Manage end-to-end SSL/TLS certificate lifecycle.
• Administer PKI platforms (Microsoft CA, DigiCert, Venafi, Entrust, Sectigo).
• Manage Enterprise Key Management (EKM) and HSMs.
• Implement certificate discovery, monitoring, and expiration alerts.
• Support cloud KMS services (Azure Key Vault, AWS KMS, Google Cloud KMS).
• Ensure security standards and regulatory compliance.
• Automate certificate and key management with scripts and APIs.
• Collaborate with Security, Infra, DevOps teams.

Skills

Certificate management

PKI architecture

SSL/TLS protocols

X.509 certificates

CSR

Certificate Authority

Cryptographic algorithms

Education

Bachelor's in Computer Science

Tools

Venafi

DigiCert

Entrust

Sectigo

Microsoft PKI

Azure Key Vault

AWS KMS

HSM Thales

HSM SafeNet Luna

Job description

Job Description

Must Have Technical/Functional Skills

• 5+ years of experience in Certificate Management and PKI administration.
• Strong understanding of:
  • PKI architecture
  • SSL/TLS protocols
  • X.509 certificates
  • Certificate Signing Requests (CSR)
  • Certificate Authorities (CA)
• Hands-on experience with:
  • Venafi, DigiCert, Entrust, Sectigo, or Microsoft PKI
  • Azure Key Vault, AWS KMS, or equivalent EKM solutions
  • HSM technologies (Thales, SafeNet, Luna HSM)
• Experience managing certificate lifecycle automation.
• Knowledge of cryptographic algorithms (RSA, ECC, AES, SHA-256).

Scripting experience in PowerShell, Python, or Bash

Roles & Responsibilities

• Manage end-to-end SSL/TLS certificate lifecycle including issuance, renewal, revocation, and automation.
• Administer Public Key Infrastructure (PKI) platforms such as Microsoft CA, DigiCert, Venafi, Entrust, or Sectigo.
• Manage Enterprise Key Management (EKM), encryption keys, HSMs (Hardware Security Modules), and key rotation processes.
• Implement certificate discovery, monitoring, and expiration alerting.
• Support cloud-based key management services (Azure Key Vault, AWS KMS, Google Cloud KMS).
• Ensure compliance with security standards and regulatory requirements.
• Troubleshoot certificate-related issues impacting applications, servers, APIs, and network devices.
• Automate certificate and key management processes using PowerShell, Python, or REST APIs.
• Collaborate with Security, Infrastructure, Application, and DevOps teams.

TCS Employee Benefits Summary

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support: Maternal & Parental Leaves.
• Insurance Options: Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
• Time Off: Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.

Salary Range: $110,000-$120,000 a year

Location

Denver, CO

Function

TECHNOLOGY

Role

Support Executive

ID

435576

Skills

Powershell

Salary Range

$110,000 - $120,000

Desired Candidate Profile

Qualifications

BACHELOR OF COMPUTER SCIENCE