Pki Security Analyst

Key Responsibilities

• Manage and support enterprise PKI and Certificate Lifecycle Management services.
• Perform certificate issuance, renewal, revocation, deployment, and troubleshooting activities.
• Handle day-to-day PKI operational support, incidents, service requests, and problem resolution.
• Administer and maintain Venafi Trust Protection Platform and Microsoft PKI environments.
• Integrate certificate management solutions with CAPI, JDK Keystores, F5, AWS ACM, and other certificate consumers.
• Develop and maintain automation scripts using PowerShell and REST APIs.
• Monitor PKI infrastructure health, certificate expiry, compliance, and security standards.
• Collaborate with infrastructure, network, cloud, application, and security teams.
• Perform Root Cause Analysis (RCA) and implement corrective actions for recurring issues.
• Support audit, compliance, and governance requirements related to PKI services.
• Drive automation and process improvement initiatives to improve operational efficiency.

Required Skills

• Strong hands-on experience with Venafi Trust Protection Platform and Microsoft PKI.
• Deep understanding of Certificate Lifecycle Management.
• Experience with CAPI, JDK Keystores, F5 Load Balancers, AWS ACM, and Venafi APIs.
• Strong PowerShell scripting and REST API integration skills.
• Experience with Windows Server administration.
• Knowledge of Active Directory, Group Policy, and enterprise authentication mechanisms.
• Good understanding of LAN, WAN, DNS, VPN, Load Balancers, and Firewalls.
• Strong troubleshooting and problem-solving skills.
• Experience working in large-scale enterprise and security environments.

Preferred Skills

• Knowledge of HSM (Hardware Security Module) technologies.
• Experience with AWS/Azure cloud certificate management.
• Familiarity with ITIL processes.
• Relevant PKI / Cybersecurity certifications.
• Experience working in highly regulated environments with security and compliance requirements.

Mandatory Skills

Enterprise PKI, Venafi Trust Protection Platform, Microsoft PKI, Certificate Lifecycle Management, CAPI, JDK Keystores, F5, AWS ACM, Venafi APIs, PowerShell, REST APIs, Windows Server, Active Directory