ORB-REC-0034
Good understanding, strong conceptual and hands on experience around PKI Infrastructure. Should be a good in PKI and Encryption service(HSM, Certificate Authority, External certificates, Storage of encryption keys, etc.) Experience in Hardware Security Module(HSM) operations. Experience in Certificate Lifecycle Management solutions. Experience in External PKI(Digicert, Let’s Encrypt, Sectigo etc), Root CA, Issuing CA, CRL, OCSP, NDES etc. Strong experience with Microsoft Certificate Services. Strong understanding in Cryptography. Experience with certificate-enabled applications such as SSL/ TLS authentication, EFS, 802.1x, Code Signing etc. Knowledge on Certificate Lifecycle Management (CLM) solutions such as AppViewX Excellent written and verbal skills are required. Good-to-Have Experience in implementation of Microsoft PKI. Experience in implementation of Hardware Security Module(HSM). Experience in PKI and HSM migration/ upgrades. Experience in Certificate and Key migration. Experience in PKI cloud solution development with Azure architectures. Knowledge on Linux OS and Ansible automation. SN Responsibility of / Expectations from the Role 1 Provide hands on engineering support required to build and maintain Internal and External CTAG_2008_Ver 1.1/JD TCS Confidential PKI systems. 2 Perform PKI operational activities such as Certificate Issuance/ Renewal, CRL publish/ renewal, Certificate Authority renewal, Software/ Patch updates etc. 3 Perform HSM related operational tasks, backup, maintenance and upgrades. 4 Plan and execute certificate automation for various keystores, appliances and applications. 5 Ensure PKI systems align to the Information Security policies, standards and the industry’s best practices. 6 Respond to Incident/ Change Management System tickets.