Technical Solns.Arch. Specialist Advisor - PKI ( SCEPman, DigiCert)

NTT
Noida
Workplace: OnsiteFull timeFunction: CybersecuritySkills: ["Secure design","Automation","Compliance"]

Design, implement, and manage enterprise PKI and cryptographic systems to ensure secure communications and data integrity. Own the lifecycle of encryption keys and X.509 digital certificates, including requesting, issuing, renewing, and revoking for users, servers, and IoT devices. Maintain PKI platforms (e.g., Microsoft ADCS, PrimeKey EJBCA, Entrust), automate certificate enrollment/renewal (SCEP/EST/REST), and drive crypto-agility from legacy algorithms toward post-quantum readiness.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
NTT
NTT
3 months ago

Technical Solns.Arch. Specialist Advisor - PKI ( SCEPman, DigiCert)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 7 hours agoStatus: Live

Job Summary

Design, implement, and manage enterprise PKI and cryptographic systems to ensure secure communications and data integrity. Own the lifecycle of encryption keys and X.509 digital certificates, including requesting, issuing, renewing, and revoking for users, servers, and IoT devices. Maintain PKI platforms (e.g., Microsoft ADCS, PrimeKey EJBCA, Entrust), automate certificate enrollment/renewal (SCEP/EST/REST), and drive crypto-agility from legacy algorithms toward post-quantum readiness.
Location: Noida
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Design, implement, and provide daily management of enterprise PKI and cryptographic systems.
  • •Oversee certificate lifecycle activities including requesting, issuing, renewing, and revoking X.509 certificates for users, servers, and IoT devices.
  • •Manage cryptographic keys through their lifecycle (generation, distribution, secure storage), including use of HSMs such as Thales or Entrust.
  • •Implement automated certificate enrollment and renewal processes (SCEP, EST, REST APIs) to prevent outages from expired certificates.
  • •Develop and enforce Certificate Policy (CP) and Certification Practice Statements (CPS) aligned to industry standards like NIST and FIPS, and lead crypto-agility transitions toward modern and post-quantum algorithms.

Key Requirements

  • •Design and manage PKI and cryptographic systems, including certificate and key lifecycle ownership.
  • •Strong understanding of cryptographic protocols such as TLS/SSL, SSH, PGP, and IPsec.
  • •Experience integrating PKI with identity systems like Active Directory (AD) and LDAP for auto-enrollment.
  • •Hands-on experience with PKI/encryption platforms such as Microsoft ADCS, PrimeKey EJBCA, Entrust, or equivalent tools (e.g., Thales/KeySecure).
  • •Ability to automate certificate enrollment and renewal using SCEP, EST, or REST APIs while maintaining compliance with CP/CPS and standards (e.g., NIST/FIPS).
Skills:Secure designAutomationCompliance
Tech Stack:PKIX.509TLS/SSLSSHPGPIPsecSCEPESTREST APIsMicrosoft ADCSPrimeKey EJBCAEntrustThalesThales CipherTrustGemalto KeySecureHashiCorp VaultAWS Certificate ManagerAzure Key VaultHSMSHA-1

Company Brief

NTT
Dimension Data, operating under NTT Ltd, provides managed IT services, cloud and data center solutions, networking, cybersecurity, and digital transformation services to enterprise customers worldwide.
Industry: Professional Services
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Established Company
Valuation: Public Company (Market Cap in USD)
Headquarters: London, United Kingdom
Founded: 1983
WebsiteLinkedIn