Senior CLM Engineer - Pune (Hybrid) - Contract Opportunity

Worldwide Technology (WWT), a 36-year-old global technology solutions provider specializing in systems integration, Infra-Cloud security, application development, AI Services, and supply chain solutions. With a workforce of 10,000+ employees and strategic partnerships with leading OEMs such as Cisco, Dell EMC, Microsoft, and NVIDIA, WWT delivers cutting-edge infrastructure, cloud, security, and custom application services to clients across 35 countries. Our Advanced Technology Centers (ATCs)lab setup environments spanning over one million square feet of world-class integration and distribution space enable us to deliver unmatched value and innovation at scale. Recognized as one of the Best Places to Work by Glassdoor and Fortune for 14 consecutive years, WWT is also ranked #6 on Indias Great Place to Work list for 2025.

Position: Senior CLM Engineer

Long-Term Contract

Pune Location

We're looking for a Cryptography CLM Engineer to own the lifecycle of digital certificates and cryptographic keys across the organization — from issuance and deployment through renewal, rotation, and revocation. You'll help build and maintain the systems that keep our PKI infrastructure secure, automated, and audit-ready.

Responsibilities

Design, implement, and maintain certificate lifecycle management (CLM) platforms and workflows across on-prem and cloud environments. Automate certificate issuance, renewal, and revocation to eliminate outages caused by expired certificates. Manage relationships with internal and public Certificate Authorities (CAs), including CA integrations and policy enforcement. Support key management practices including generation, storage, rotation, and secure destruction, aligned with industry standards (NIST, PCI-DSS, etc.). Partner with application, infrastructure, and security teams to onboard services into CLM tooling. Monitor certificate inventories, flag expirations and vulnerabilities, and maintain reporting/dashboards. Troubleshoot certificate-related incidents (TLS/SSL failures, trust chain issues, expired certs). Document standards, runbooks, and best practices for cryptographic operations. Evaluate and integrate CLM tools (e.g., Venafi, HashiCorp Vault, AppViewX, Keyfactor).

Requirements

Experience in cryptography, PKI, or certificate management. Solid understanding of X.509 certificates, TLS/SSL, public/private key cryptography, and CA hierarchies. Hands-on experience with at least one CLM/PKI platform (Venafi, Keyfactor, AppViewX, HashiCorp Vault, or similar). Scripting/automation skills (Python, PowerShell, or Bash) for integrating CLM workflows. Familiarity with cloud key management services (AWS KMS, Azure Key Vault, GCP KMS). Understanding of compliance frameworks relevant to cryptography (NIST 800-57, FIPS 140-2/3, PCI-DSS). Strong troubleshooting skills across networking and security domains.