PKI / Venafi TPP Engineer Certificate Management & Encryption

Role & Responsibilities:

• Engineer, implement, and manage Venafi Trust Protection Platform (TPP) and related PKI infrastructure components.
• Oversee certificate lifecycle management including issuance, renewal, revocation, and compliance monitoring.
• Manage and support Certificate Authorities (CA) such as Microsoft ADCS and Entrust MSO.
• Configure and maintain Hardware Security Modules (HSMs) ensuring security and operational compliance.
• Troubleshoot and resolve issues related to certificate management, encryption, and PKI integrations.
• Support cryptography and key management for both on-premise and cloud-based environments.
• Collaborate with internal security, network, and application teams to ensure secure certificate deployment.
• Maintain documentation, enforce standards, and ensure adherence to organizational security policies.
• Provide after-hours or weekend support when required for urgent technical resolutions.

Preferred Candidate Profile:

• Experience: Minimum 58 years in PKI, certificate management, encryption, or security engineering roles.
• Technical Expertise: Hands-on experience with Venafi TPP, Microsoft ADCS, Entrust, and HSM platforms.
• Strong understanding of cryptography principles, key management, and security compliance frameworks.
• Proficiency in Linux-based environments and command-line operations.
• Excellent analytical, troubleshooting, and communication skills.
• Certifications such as Venafi Certified Engineer, CompTIA Security+, CISSP, or Microsoft PKI certification are preferred.
• Ability to work independently, manage multiple priorities, and collaborate with cross-functional teams.
• Willing to work from Chennai (in-office) and support flexible hours when needed.