Job Summary
Role: PKI Engineer / PKI Specialist
Experience: 5–8+ years
Domain: Cyber Security – PKI & Certificate Lifecycle Management
Role Objective
Responsible for administration, operation and support of enterprise Public Key Infrastructure (PKI) and Certificate Lifecycle Management (CLM) services, ensuring secure and reliable certificate issuance, renewal, revocation and lifecycle management.
Key Responsibilities
Key Responsibilities
- Manage and support enterprise Microsoft PKI / Certificate Authority (CA) infrastructure.
- Manage Root CA, Subordinate/Issuing CA, CRL, OCSP and NDES services. These components are explicitly part of the current PKI environment scope. [FW: dsm-fi...3400008349 | Outlook], [RE: AppVie...Initiation | Outlook]
- Manage complete digital certificate lifecycle including issuance, renewal, revocation and validation. [FW: dsm-fi...3400008349 | Outlook]
- Administer and support AppViewX Certificate Lifecycle Management (CLM) platform.
- Integrate AppViewX with internal PKI and external/public CAs such as DigiCert and Entrust. [FW: dsm-fi...3400008349 | Outlook]
- Support ACME-based certificate management and migration.
- Configure and maintain certificate templates and certificate distribution mechanisms.
- Monitor certificate expiry and drive certificate renewals before service impact.
- Support migration of manually managed certificates into automated CLM processes.
- Troubleshoot certificate enrolment, renewal, revocation and PKI connectivity issues.
- Support certificate deployments across applications, servers and network devices.
- Support cross-forest certificate enrolment/deployment. [FW: dsm-fi...3400008349 | Outlook]
- Perform PKI health monitoring and support high-availability/DR requirements.
- Support PKI infrastructure migration, certificate migration and legacy PKI decommissioning.
- Develop and maintain PKI SOPs, operational documentation, troubleshooting guides and audit evidence.
- Handle incidents, service requests and changes related to PKI/CLM services.
- Coordinate with application, infrastructure, network, IAM and Cyber Security teams for certificate-related requirements.
Skill Requirements
Mandatory Technical Skills
- Microsoft PKI / AD CS
- AppViewX CLM
- Certificate Authority architecture
- Root CA / Issuing CA
- X.509 certificates
- Certificate issuance, renewal and revocation
- CRL & OCSP
- NDES / SCEP
- Certificate templates
- DigiCert / Entrust
- ACME
- Active Directory
- SSL/TLS certificates
- PKI troubleshooting
- PowerShell / automation fundamentals
Other Requirements
Good to Have
- Azure-based PKI exposure. Your PKI project material specifically references building the new PKI environment in Azure Cloud. [FW: dsm-fi...3400008349 | Outlook]
- CyberArk-AppViewX integration exposure
- Sectigo certificate management
- Hardware Security Module (HSM) knowledge
- PGP/key-management knowledge
- PKI migration and legacy CA decommissioning experience
- Scripting/automation using PowerShell
- ITIL / ServiceNow operational experience
Key Deliverables
Certificate Issuance → Renewal → Revocation → Expiry Management → CLM Automation → PKI Monitoring → Incident Resolution → Compliance & Audit
Key Interview Screening Areas
MS PKI | AppViewX | DigiCert/Entrust | AD CS | Root/Issuing CA | NDES | OCSP | CRL | ACME | SSL/TLS | Certificate Migration | Automation