MS PKI - CLM Solution Architect (Certificate Lifecycle) | Pan India

Job Summary

Value Innovation Labs is hiring an experienced PKI and Certificate Lifecycle Management (CLM) professional to lead and enhance enterprise-wide PKI for a leading enterprise client. You will own the design, implementation and governance of CLM platforms across on-prem, cloud and hybrid environments.

Mandatory Skills

- ADCS (Active Directory Certificate Services) PKI implementation is mandatory, along with strong CLM expertise

- Minimum 8-9 years of core, hands-on PKI experience

- Hands-on with at least one of AppViewX CERT+ (preferred), CyberArk Certificate Manager, Venafi Trust Protection Platform, DigiCert or Keyfactor

Roles & Responsibilities

- Lead the design, implementation and management of enterprise CLM on AppViewX, CyberArk, Venafi, Keyfactor and Microsoft PKI

- Lead certificate lifecycle operations: discovery, issuance, renewal, revocation, deployment and monitoring

- Administer CLM platforms and Microsoft PKI (ADCS) environments

- Configure and maintain integrations with AD CS, public CAs, cloud platforms (Azure, AWS, GCP) and enterprise applications

- Integrate CLM with ITSM, load balancers, web servers and DevOps toolchains

- Design certificate automation workflows using native capabilities, REST APIs, PowerShell and scripting

- Manage certificate inventories and enforce governance, compliance and risk controls

- Define and enforce policies for certificate issuance, key management, cryptographic standards and private key protection

- Build reporting, monitoring and auditing for certificate health and compliance

- Support onboarding and automation across servers, applications, load balancers, cloud and containers

- Partner with Security, Infrastructure, Cloud, DevOps and Application teams

- Advise on PKI architectures, protocols, trust models and automation strategy

- Mentor team members and drive continuous improvement

- Stay current on machine identity, PKI and cybersecurity trends

Desired Candidate Profile

- 8 to 13 years of overall experience, with at least 8-9 years of hands-on PKI experience

- Proven ADCS (Microsoft PKI) implementation experience

- Hands-on experience with at least one major CLM tool: AppViewX, CyberArk Certificate Manager, Venafi or Keyfactor

- Knowledge of public CAs such as DigiCert, Sectigo, Entrust and GlobalSign

- Working knowledge of ACME, EST and SCEP protocols

- Familiarity with Azure Key Vault, AWS Certificate Manager and Google CAS

- Strong PowerShell and REST API scripting skills

- ServiceNow integration experience is a plus

- Strong PKI architecture and certificate governance knowledge

- Good communication and stakeholder management skills

Why Apply

- Permanent role on Value Innovation Labs payroll with a marquee enterprise client

- Hybrid work mode; openings across Mumbai, Pune, Bengaluru, Chennai, Hyderabad, Delhi NCR and Kolkata

- Ownership of enterprise PKI and machine identity architecture

- Immediate to 30 days notice preferred (up to 60 days considered for strong profiles)