Pki Security Engineer

Tata Consultancy Services Limited; Atlanta (GA); On-site; USD 100,000 - 120,000; Full time

Benefits offered by this job

Discretionary annual incentive

Comprehensive medical coverage

Parental leaves

401K plan

Job summary

Tata Consultancy Services in Atlanta, GA seeks a Senior Security Engineer to lead and mature the PKI program, drive strategy, governance, and implementation of PKI across cloud and on-premise environments. The role emphasizes collaboration with IT stakeholders to ensure compliance and robust security postures.

Ideal candidates have extensive PKI experience, Venafi expertise, and strong scripting skills. This on-site opportunity offers competitive compensation and benefits for a senior security

Qualifications

• Bachelor's degree in information security, computer science, or related field.
• Demonstrated PKI, Venafi, digital certificate management, IBM Mainframe, scripting, and information security experience.

Responsibilities

• Support and mature the organization's PKI program, including strategy, governance, implementation, operations, and compliance alignment.
• Engage with system owners and IT stakeholders to provide PKI security guidance for long-term objectives.
• Design, implement, and manage PKI and security solutions independently and prioritize tasks.

Skills

PKI design

Venafi

AWS PKI services

PowerShell

Python

TLS/SSL

Certificate Authority

HSPD-12 compliance

Agile

Education

Bachelor's Degree in Information Security/ CS

Tools

Windows Server

Linux

KMS

CloudHSM

CloudFront

LDAPS

Job description

Job Description

Must Have Technical/Functional Skills

• Good working experience with scripting platforms (PowerShell, Batch, JSON, Python, YAML, etc.).
• Expert in PKI design, implementation, administration, and provisioning in AWS. Extensive experience in AWS PKI services: KMS, CloudHSM, ACM, CloudFront, Secrets Manager, and CloudTrail.
• Experience with PKI-based products, including web servers and certification authorities, and common PKI-based protocols, including SSL and TLS, HTTPS, or LDAPS.
• A solid understanding of Public Key Infrastructure (PKI), including technology, standards, and implementations, with experience managing, configuring, or supporting a PKI certificate authority.
• Experience with certificate authority (CA) implementation in compliance with the Federal PKI (FPKI) Common Policy Authority.
• Conduct technical research and set cloud security direction and strategy.
• Experience in automating certificate renewal and certificate life cycle management.
• Experience with Microsoft's PKI technologies and the latest Windows and Linux server platforms.
• Experience with integration of Venafi with Microsoft PKI technologies and public PKI providers.
• Experience with IBM Mainframe platform encryption (TKE, UKO, SGKLM, etc.).
• Experience in areas such as identity management, provisioning, authentication, authorization, certification/governance, and monitoring, including HSPD-12 compliance.
• Experience developing and implementing IT Contingency Plans.
• Preferred Qualifications & Skills
• Bachelor's Degree in Information Security, Computer Science, or a related field.
• Demonstrated professional experience in PKI, Venafi, digital certificate management, IBM Mainframe, scripting, and Information Security domains.
• Experience with Agile software development methodologies.
• Preferred one or more certifications: CISSP, AWS Cloud Certificates, CISM, or another Cyber Security-related certification.

Roles & Responsibilities

• Support and mature the organization's PKI (Public Key Infrastructure) program, including strategy, governance, implementation, operations, and continuous alignment with compliance and regulatory requirements.
• Engage with system owners, business teams, and IT stakeholders in strategic discussions to provide best-in-class PKI security strategy and industry guidance to maximize long-term business objectives.
• Demonstrated ability to work independently, prioritize responsibilities, and design, implement, and manage PKI and security solutions.
• Solid understanding of PKI concepts and security properties.
• Support PKI-based products, including web servers and certification authorities, and common PKI-based protocols, including SSL and TLS, HTTPS, or LDAPS.
• Experience with certificate authority (CA) implementation in compliance with the Federal PKI (FPKI) Common Policy Authority.
• Review and remediate defects in certificate system components.
• Develop certificate system components to implement new capabilities.
• Strong expertise in PKI engineering support and troubleshooting.
• Experience with HSM design and implementation.
• Working knowledge of OSI layer 2-7 security tactics and different kinds of attacks.

Salary Range-$100,000-$120,000 a year

#LI-KR3

TCS Employee Benefits Summary:

• Discretionary Annual Incentiv e.
• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support: Maternal & Parental Leaves.
• Insurance Options: Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.a
• Time Off: Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.

Location

Atlanta, GA

Function

TECHNOLOGY

Role

Senior Security Engineer

ID

438422

Skills

Microsoft PKI

Salary Range

$100,000 - $120,000