Public Key Infrastructure

Position: Microsoft Cryptography/PKI Architect or Consultant.

Job Description:

Job Title: Microsoft PKI Architect or Consultant

Location: Noida Preferred. But open for other location.

Experience: 13 – 16 Years

Job Summary:

We are looking for a highly skilled Cyber Security Architect / Consultant with deep expertise in Public Key Infrastructure (PKI), Certificate Lifecycle Management (CLM), cryptographic technologies, Post-Quantum Cryptography (PQC), and crypto agility. The role involves designing, implementing, and modernizing enterprise cryptographic environments while ensuring scalability, compliance, and future readiness against quantum threats.

Key Responsibilities:

Architecture & Strategy

• Design and implement enterprise PKI and CLM solutions (on-premises, cloud, and hybrid).
• Define and drive cryptographic architecture, standards, and governance.
• Develop crypto agility roadmap and support transition to quantum-safe cryptography.
• Perform current-state assessment, gap analysis, and target-state architecture for cryptographic environments.
• Provide consulting and advisory to application, cloud, network, and infrastructure teams on secure cryptographic integration.

Implementation & Operations

• Lead deployment and migration of PKI hierarchies, HSM integration, key management, and certificate automation.
• Implement certificate discovery, inventory, and lifecycle automation.
• Support secure key management practices across multi-cloud and on-prem platforms.
• Integrate PKI with IAM, DevOps, containers, service mesh, and Zero Trust architectures.

Post-Quantum Readiness

• Assess quantum risk exposure across enterprise systems.
• Evaluate and recommend PQC algorithms and hybrid cryptographic models.
• Define and execute quantum-safe migration strategy.

Risk, Compliance & Governance

• Ensure compliance with NIST, ETSI, ISO 27001, PCI-DSS, and regulatory requirements.
• Conduct cryptographic risk assessments and threat modeling.
• Define policies, standards, and best practices for enterprise cryptography.

Stakeholder & Consulting

• Act as SME for cryptography and PKI in client engagements.
• Prepare and deliver technical presentations, architecture documents, and executive briefings.
• Collaborate with cross-functional teams and provide technical leadership.

Required Technical Skills

• Strong hands-on experience in PKI design, implementation, and migration.
• Expertise in Certificate Lifecycle Management (CLM) platforms.
• Deep understanding of:
• X.509 certificates, CRL, OCSP
• Key management and HSMs
• TLS/SSL, mTLS, code signing, document signing
• SSH key management
• Knowledge of crypto discovery and automation tools.
• Strong understanding of Post-Quantum Cryptography (PQC) and crypto agility frameworks.
• Experience in cloud PKI and key management (AWS, Azure, GCP).
• Scripting/automation using PowerShell, Python, Bash, or APIs.

Consulting & Communication Skills

• Excellent client-facing and stakeholder management skills.
• Ability to translate business requirements into secure cryptographic architectures.
• Strong documentation, presentation, and solution design capabilities.

Preferred Qualifications

• Experience with Zero Trust and machine identity management.
• Knowledge of DevSecOps and certificate automation in CI/CD pipelines.
• Familiarity with quantum risk assessment methodologies.
• Relevant certifications (one or more):
• CISSP / CCSP
• CISM
• TOGAF
• Vendor PKI certifications

• Bachelor's degree in computer science, Information Technology, or a related field.
• Proven experience as a PKI Architect or Consultant with a focus on strategic design.
• In-depth knowledge of cryptographic algorithms, digital certificates, and security protocols.
• Experience in conducting PKI assessments and providing actionable recommendations.
• Strong analytical and problem-solving skills.
• Excellent communication and client-facing skills.
• Ability to work independently and collaboratively with client teams.