Technical Architect

Tata Consultancy Services Limited; Mill Creek (WA); On-site; USD 160,000 - 175,000; Full time

Benefits offered by this job

Discretionary Annual Incentive

Comprehensive Medical Coverage

Family & Parental Leaves

401K Plan

Certification & Training Reimbursement

Vacation & Holidays

Sick Leave

Job summary

Tata Consultancy Services Limited is seeking a senior PKI Architect to design and lead certificate lifecycle automation across cloud and on-prem environments. You will drive secure identity, machine identity, and trust strategies, with emphasis on Venafi and enterprise PKI governance.

The role requires extensive PKI, HSM, and scripting experience in Azure and AWS, along with regulatory compliance expertise. On-site work in Mill Creek, WA is expected.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related discipline.
• 10+ years of Information Security experience.
• 5+ years of hands-on PKI architecture experience.
• 5+ years of Venafi Trust Protection Platform experience.
• Strong expertise in X.509 Certificates, TLS/SSL, PKI, HSM Technologies, Digital Signatures, Cryptographic Key Management.
• Experience designing PKI solutions in Azure and AWS environments.
• Strong scripting skills using PowerShell and Python.

Responsibilities

• Architect automated certificate provisioning and renewal solutions.
• Lead application onboarding into CLM services and support deployment across Windows Server, IIS, Apache, Tomcat, WebLogic, AWS, F5, Kafka, Solace.
• Provide architecture guidance and troubleshooting for certificate-related issues.
• Ensure compliance with NIST, PCI-DSS, SOX, ISO 27001, FedRAMP and enterprise security standards.
• Conduct cryptographic risk assessments and certificate posture reviews.
• Define certificate ownership models and governance processes; support audits and regulatory activities.

Skills

PKI architecture

TLS/SSL

X.509 Certificates

HSM integration

Digital signatures

REST APIs

Automation

Scripting

PowerShell

Python

Education

Bachelor's degree in Computer Science / Engineering

Tools

Venafi Trust Protection Platform

Keyfactor

DigiCert

Entrust

Microsoft ADCS

HashiCorp Vault

AWS Certificate Manager

GitHub Actions

Ansible

Job description

Certificate Lifecycle Automation

• Architect automated certificate provisioning and renewal solutions.
• vCert
• PowerShell
• Python
• Ansible
• GitHub Actions

Application & Cloud Integration

• Lead application onboarding into CLM services.
• Support certificate deployment and automation across:
  • Windows Server
  • IIS
  • Apache
  • Tomcat
  • WebLogic
  • AWS
  • F5 Load Balancers
  • Kafka
  • Solace
• Provide architecture guidance and troubleshooting support for complex trust and certificate-related issues.

Governance & Compliance

• Ensure compliance with NIST, PCI-DSS, SOX, ISO 27001, FedRAMP, and enterprise security standards.
• Conduct cryptographic risk assessments and certificate posture reviews.
• Define certificate ownership models and governance processes.
• Support audits and regulatory compliance activities

Required Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related discipline.
• 10+ years of Information Security experience.
• 5+ years of hands-on PKI architecture experience.
• 5+ years of Venafi Trust Protection Platform experience.
• Strong expertise in:
  • X.509 Certificates
  • TLS/SSL
  • PKI
  • HSM Technologies
  • Digital Signatures
  • Cryptographic Key Management
• Experience designing PKI solutions in Azure and AWS environments.
• Strong scripting skills using PowerShell and Python.

Preferred Qualifications

• CISSP, CISM, CCSP, or equivalent certification.
• Experience with:
  • Keyfactor
  • DigiCert
  • Entrust
  • Microsoft ADCS
  • HashiCorp Vault
  • AWS Certificate Manager
• Experience operating in BFSI or other highly regulated environments.

Technical Skills PKI & Cryptography

• X.509 Certificates
• TLS/SSL
• PKCS Standards
• Digital Signatures
• HSM Integration
• CRL / OCSP Venafi
• Certificate Discovery
• Policy Management
• Workflow Automation
• Reporting & Governance Cloud & DevOps
• AWS
• GitHub Actions
• Infrastructure as Code Programming & Automation
• PowerShell * Python
• REST APIs
• Ansible

Leadership Expectations

• Serve as the PKI and Machine Identity SME.
• Provide technical leadership to engineering and operations teams.
• Develop enterprise PKI roadmaps and modernization strategies.
• Mentor engineers and establish best practices for certificate lifecycle management.
• Drive Zero Trust and identity-centric security initiatives.

Salary Range: $160,000 - $175,000 a year

TCS Employee Benefits Summary:

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support: Maternal & Parental Leaves.
• Insurance Options: Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
• Time Off: Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.