8.0 - 13.0 years

27 - 40 Lacs

Pune

Work from Office

About Position: We are seeking an experienced Senior PKI Engineer to lead and manage the design, implementation, and lifecycle of our enterprise Public Key Infrastructure (PKI). The ideal candidate will have in-depth expertise in Microsoft PKI (MSPKI) technologies, NDES/SCEP, CRL Distribution, and a strong foundation in data security practices. Candidate will work closely with cybersecurity, infrastructure, and compliance teams to ensure secure certificate-based authentication and encryption across the organization. Role: PKI Support Lead Location: All PSL Location Experience: 8-15years Job Type: Full Time Employment What You'll Do: Lead the design, implementation, and maintenance of Microsoft Active Directory Certificate Services (ADCS) including Root CA, Issuing CAs, CRL Distribution Points (CDPs), and OCSP responders. Administer and support NDES and SCEP gateway integration with mobile device management (MDM) platforms like Microsoft Intune. Manage certificate lifecycle management (CLM) processes for internal and external certificates including automation, monitoring, and renewal workflows. Design and enforce policies around certificate issuance, revocation, and renewal to align with organizational security and compliance standards. Ensure CRL and OCSP infrastructure availability and redundancy across hybrid environments. Work with application teams to integrate TLS/SSL certificates securely for web servers, APIs, IoT devices, and internal services. Implement robust data security controls, encryption standards, and digital signature enforcement using PKI. Collaborate with compliance and audit teams for regulatory reporting and encryption feasibility assessments. Maintain documentation, configuration baselines, and DR plans for PKI infrastructure. Expertise You'll Bring: Experience 8+ years of experience in PKI implementation and operations. Deep knowledge and hands-on experience with Microsoft ADCS, including Standalone and Enterprise CAs. Strong expertise in NDES, SCEP, and integration with mobile or endpoint management solutions. Experience in managing CRL Distribution Points, OCSP responders, and AIA locations. Proficiency in certificate lifecycle automation, PowerShell scripting, and use of tools like certreq, certutil, or third-party CLM platforms. Understanding of cryptographic protocols, X.509 standards, and certificate-based authentication. Working knowledge of data security concepts, including encryption at rest/in transit, key management, and regulatory compliance (e.g., DORA, GDPR, HIPAA). Experience in troubleshooting complex PKI issues across distributed environments. Experienced with HSM (Hardware Security Modules) and key protection strategies. Exposure to Cloud PKI or migration from on-prem PKI to cloud-native certificate services. Knowledge of Intune integration with NDES/SCEP for certificate delivery to mobile endpoints. Technical Skills PKI Implementation and deployment. Certification Authentication, Certification management, NDES, SCEP, ADCS, CDPs, OCSP etc. Benefits: Competitive salary and benefits package Culture focused on talent development with quarterly promotion cycles and company-sponsored higher education and certifications Opportunity to work with cutting-edge technologies Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards Annual health check-ups Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents Inclusive Environment: Persistent Ltd. is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds. We offer hybrid work options and flexible working hours to accommodate various needs and preferences. Our office is equipped with accessible facilities, including adjustable workstations, ergonomic chairs, and assistive technologies to support employees with physical disabilities. If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment. We are committed to creating an inclusive environment where all employees can thrive. Our company fosters a values-driven and people-centric work environment that enables our employees to: Accelerate growth, both professionally and personally Impact the world in powerful, positive ways, using the latest technologies Enjoy collaborative innovation, with diversity and work-life wellbeing at the core Unlock global opportunities to work and learn with the industry's best Let's unleash your full potential at Persistent "Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."

Posted 1 week ago

Apply

PKI Implementation Engineer Dotsquares

5.0 - 10.0 years

20 - 35 Lacs

Jaipur

Remote

PKI Consultant / PKI Implementation Engineer Company: Goallsecure (Dotsquares) Location: Hybrid / Remote / Jaipur Experience Required: 5+ Years Job Type: Full Time Kindly share your CV at jyoti.chawla@dotsquares.com / Call 9799074999 Mandatory Skills 1. Strong working knowledge of PKI management and concepts including CA deployment, template creation, and certificate lifecycle management. 2. Experience/exposure in implementing PKI-product such as Keyfactor, EJBCA, Autoenrolment, Orchestration services. 3. Azure exposure - solid understanding of federation, identity sync, ADFS, networking concepts. 4. Architecture design diagrams - working knowledge of creating high level architecture diagrams (having PKI focus is a plus) 5. Familiarity/Hands on experience working with NDES, Active Directory Certificate Services, Azure AD, Active Directory. 6. Familiarity with single sign on (SSO) and SAML, understanding of concepts such as claims aware applications. 7. Understanding of roles, permissions in Windows/Linux environments. 8. Understanding of PowerShell scripting, and ability to create custom workflows for API integrations. Desired skills: 1. Knowledge/experience working with SCEP (simple certificate enrolment protocol). 2. Knowledge/experience working with ACME/CMP/EST protocols. 3. Knowledge/experience working EJBCA 4. IAM exposure - identify and access management with any products/technologies. 5. Familiarity in working with Linux/Unix operation systems. 6. Familiarity in working with ITSM solutions such as ServiceNow and BMC Remedy.

Posted 1 month ago

Apply

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.