Job description:

Position Summary
We are seeking a highly skilled and experienced Level 3 Public Key Infrastructure (PKI) Subject Matter Expert (SME) to join our IT Security Operations team. The ideal candidate will be responsible for maintaining and optimizing enterprise PKI environments, ensuring secure certificate lifecycle management, troubleshooting complex PKI-related issues, and supporting critical security initiatives. This role requires deep technical expertise, operational experience, and the ability to handle escalations as the top-level PKI authority within the organization.
________________________________________
Key Responsibilities
1. PKI Operations and Maintenance:
o Manage and maintain the enterprise PKI environment, including Microsoft Certificate Services and other CA platforms.
o Oversee certificate lifecycle management for internal and external certificates, including monitoring, renewal, revocation, and inventory.
o Ensure the availability, performance, and scalability of PKI systems through proactive maintenance and updates.
o Manage and Maintain Hardware Security module, integrated with MS PKI.
2. Incident and Problem Resolution:
o Act as the escalation point for Level 2 teams, troubleshooting complex PKI and certificate-related issues.
o Analyze root causes for PKI incidents and implement preventive measures to avoid recurrence.
o Resolve interoperability challenges with other security tools and infrastructure components.
3. Policy and Compliance:
o Ensure PKI operations comply with organizational security policies, industry standards (e.g., NIST, CIS), and regulatory requirements.
o Support audits by providing evidence of compliance and addressing findings related to PKI.
4. Documentation and Knowledge Sharing:
o Maintain detailed documentation of PKI architecture, processes, and troubleshooting guides.
o Provide technical guidance and training to Level 1 and Level 2 teams to improve overall operational capability.
5. Collaboration and Support:
o Work closely with security architects, network engineers, and application teams to support PKI integration with enterprise systems.
o Assist in designing PKI solutions for new projects and initiatives.
6. Continuous Improvement and Research:
o Stay updated on emerging PKI technologies, cryptographic advancements, and security threats.
o Recommend and implement improvements to enhance PKI security and operational efficiency.
________________________________________
Required Skills and Qualifications
1. Technical Expertise:
o Extensive knowledge of PKI concepts, standards (X.509, CRL, OCSP), and best practices.
o Proficiency in Microsoft Certificate Services, including root and subordinate CA management.
o Understanding of Hardware Security module is must to have. Previous experience working on HSM would be added advantage.
o Familiarity with certificate use in TLS/SSL, email encryption, code signing, and client authentication.
2. Operational Experience:
o Proven experience in managing enterprise PKI environments in a large-scale, high-availability setup.
o Expertise in certificate lifecycle management tools (e.g., Venafi, DigiCert, or similar).
o Strong troubleshooting skills with experience in analyzing logs, debugging, and resolving complex PKI issues.
3. Security Knowledge:
o Understanding of cryptographic algorithms (RSA, ECC, SHA), key management principles, and security protocols.
4. Soft Skills:
o Excellent problem-solving skills and attention to detail.
o Strong written and verbal communication skills for technical and non-technical audiences.
o Ability to work independently and collaboratively in a fast-paced environment.
________________________________________
Education and Experience

• Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent experience).