IT Operations Specialist-Certificate, DNS, and Identity Management

IT Operations Specialist – Certificate, DNS & Identity Management

Location – Pune

Job Type – Full Time

Looking for an experienced IT Operations Specialist – Certificate, DNS & Identity Management to manage and support enterprise certificate lifecycle, DNS infrastructure, and identity management services. The ideal candidate should have strong hands-on experience in SSL/TLS certificates, PKI, DNS, Active Directory, hybrid identity, Azure/Entra ID, and IT operations, with a focus on security, automation, reliability, and continuous improvement.

Responsibilities

• Manage the complete SSL/TLS certificate lifecycle, including issuance, renewal, monitoring, deployment, and certificate inventory
• Administer PKI and certificate management solutions, including certificate templates, CSR generation, and key management
• Manage internal and external DNS infrastructure, DNS records, and domain lifecycle activities
• Support domain registration, renewal, transfer, and DNS-related risk mitigation activities
• Administer Active Directory and Microsoft Entra ID in hybrid identity environments
• Manage Group Policy (GPO), directory services, users, roles, and access configurations
• Troubleshoot authentication issues involving MFA, SSO, Conditional Access, SAML, and OIDC
• Manage Azure resources including subscriptions, resource groups, and RBAC assignments
• Develop scripts and automation to improve certificate, DNS, and identity management operations
• Monitor platform health, certificate expiry, DNS availability, and operational risks
• Collaborate with security, infrastructure, application, and regional IT teams to ensure reliable service delivery
• Maintain operational documentation, processes, runbooks, and knowledge repositories
• Drive standardization, automation, and continuous improvement across global IT operations

Must-Have Qualifications

• Bachelor's degree in Engineering, IT, Computer Science, or equivalent qualification
• 7+ years of overall IT experience in enterprise or shared services environments
• 3+ years of hands-on experience in SSL/TLS certificate and certificate lifecycle management
• Strong experience with PKI, OpenSSL, Certbot, ACME, CSR generation, and key management
• Strong hands-on experience in DNS administration and domain lifecycle management
• 5+ years of experience in Active Directory, directory services, and hybrid identity environments
• Hands-on experience with Microsoft Entra ID, GPO, MFA, SSO, and Conditional Access
• Knowledge of SAML, OIDC, service principals, and Azure RBAC
• Experience with automation and scripting, preferably Python or PowerShell
• Strong understanding of ITIL, incident management, change management, and service operations
• Excellent troubleshooting, stakeholder management, and communication skills
• Ability to work effectively with global, cross-functional, and multicultural teams

Good to Have

• Experience with Sectigo Certificate Manager (SCM)
• Knowledge of DNSSEC
• Experience with advanced certificate use cases such as code signing, device certificates, SAML, and client authentication
• Experience with APIs and automation integrations
• Knowledge of Power BI or other operational reporting tools
• ITIL Foundation certification