Must Have Technical/Functional Skills
Strong understanding of:
Public Key Infrastructure (PKI)
SSL/TLS Certificates
Certificate Signing Requests (CSR)
Certificate Revocation Lists (CRL)
OCSP
Encryption and Cryptographic Concepts
Roles & Responsibilities
Manage the complete lifecycle of digital certificates, including enrollment, issuance, renewal, revocation, and expiration management.
Administer and support enterprise PKI environments and Certificate Authorities (CAs).
Monitor certificate health and proactively address expiring or non-compliant certificates.
Implement and manage certificate automation solutions to reduce operational overhead.
Ensure secure deployment of SSL/TLS certificates across servers, applications, network devices, APIs, and cloud environments.
Perform certificate inventory management and maintain accurate records of certificate ownership.
Troubleshoot certificate-related issues affecting applications, websites, and infrastructure services.
Support cryptographic key management processes and HSM integrations.
Enforce certificate and key management policies, standards, and procedures.
Coordinate with infrastructure, cloud, application, and security teams to ensure proper certificate deployment.
Support audits, regulatory requirements, and compliance initiatives.
Develop dashboards and reports to provide visibility into certificate health and compliance status.
Strong understanding of:
Public Key Infrastructure (PKI)
SSL/TLS Certificates
Certificate Signing Requests (CSR)
Certificate Revocation Lists (CRL)
OCSP
Encryption and Cryptographic Concepts
Experience with Windows, Linux, cloud platforms, and enterprise network environments.
Familiarity with DNS, Load Balancers, Web Servers, and Application Servers.
Experience integrating certificate management with DevOps and CI/CD pipelines.
Knowledge of security and compliance standards including NIST, PCI-DSS, SOX, HIPAA, and ISO 27001.
Generic Managerial Skills, If any
5+ years of experience in Certificate Management, PKI Administration, or Cybersecurity Operations.
Hands-on experience with:
Microsoft Active Directory Certificate Services (ADCS)
DigiCert
Sectigo
Entrust
Venafi
Keyfactor
AppViewX