PKI & Certificate Lifecycle Engineer

Job not on LinkedIn

🕒 October 5

🇮🇳 India – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👷🏻‍♀️ Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Kyndryl

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 2021

💼 Consulting

📦 Logistics

🏥 Healthcare

Consulting • Logistics • Healthcare

Kyndryl is a leading IT infrastructure services provider, serving thousands of enterprise customers worldwide. The company specializes in designing, building, managing, and modernizing complex, mission-critical information systems. Kyndryl offers a range of services including IT consulting, cloud services, cybersecurity, data and AI solutions, and digital workplace transformation. With a strong focus on innovation, partnerships, and co-creation, Kyndryl helps businesses tackle IT complexity and drive operational excellence. The company operates across various industries such as automotive, healthcare, banking, and more, providing expertise and solutions to address industry-specific challenges. Kyndryl's global network and strategic alliances empower enterprises to adapt to the evolving technology landscape, ensuring their essential systems are reliable and efficient.

📋 Description

• Administer and support DigiCert TLM and related PKI services • Manage certificate requests, issuance, renewal, revocation, inventory, monitoring, and retirement • Assist users and technology teams with public TLS, private TLS, S/MIME, code-signing, VPN/Wi-Fi, endpoint, server, application, and machine identity certificates • Troubleshoot certificate lifecycle, trust, and deployment issues • Partner with network, application, cloud, endpoint, and infrastructure teams • Gather requirements and coordinate certificate onboarding • Support integrations and resolve service issues • Develop scripts, reports, and workflows to improve certificate inventory, monitoring, renewal, notification, and operational efficiency • Contribute to service enhancements and broader PKI capabilities • Follow PKI governance and security standards • Maintain operational documentation • Support incident and problem management • Escalate risks and issues appropriately • Work with distributed global technology teams

🎯 Requirements

• 3+ years of experience in PKI, certificate management, cybersecurity, infrastructure engineering, or a related technical field • Practical understanding of X.509 certificates, certificate authorities, certificate chains, public/private keys, and SSL/TLS • Experience with an enterprise PKI, managed PKI, or certificate lifecycle management platform • Ability to troubleshoot certificate enrollment, renewal, trust, installation, and configuration issues • Basic scripting or automation experience using Python, PowerShell, Bash, or similar technology • Familiarity with Windows and/or Linux environments, REST APIs, and enterprise networking concepts • Strong analytical, documentation, communication, and stakeholder management skills • Ability to work independently and collaborate with distributed global technology teams • Strong written and spoken English communication skills • Bachelor's degree in computer science, Information Technology, Cybersecurity, Engineering, or a related technical discipline • Preferred: Experience with DigiCert TLM, DigiCert ONE, Venafi, Keyfactor, Microsoft AD CS, or similar PKI platforms • Preferred: Exposure to ACME, SCEP, or EST • Preferred: Familiarity with OpenSSL, cloud certificate management, Azure Key Vault, or AWS Certificate Manager • Preferred: Experience supporting S/MIME, code signing, VPN/Wi-Fi, public/private TLS, or machine identity certificates • Preferred: Familiarity with Microsoft Intune, Active Directory, Entra ID (Azure AD), and enterprise device certificate deployment • Preferred: Exposure to DevOps methodologies, certificate lifecycle automation, and CI/CD platforms such as Azure DevOps, GitHub Actions, GitLab CI/CD, or Jenkins

🏖️ Benefits

• Flexible, supportive environment • Well-being prioritized • Hands-on experience • Learning opportunities • Opportunities to certify in all four major platforms • Be Well programs supporting financial, mental, physical, and social health • Personalized development goals • Continuous feedback • Certifications with Microsoft, Google, and Amazon • Coaching and hands-on experiences • Cutting-edge learning opportunities • Employee referral program