A PKI / ADCS Engineer

Role Purpose

Band B3

An L3 resource must possess in-depth knowledge of the following skills to meet customer expectations: -Thales Luna SA HSM -Thales CiphertrustManager KMS -Microsoft ADCS PKI

-A PKI / ADCS Engineer is responsible for designing, deploying, and managing enterprise Public Key Infrastructure including Root CA, Intermediate CA, and Issuing CA servers while ensuring secure certificate issuance and validation processes. The role involves hands-on management of Microsoft ADCS components such as NDES (SCEP), CEP/CES services, and integration with Active Directory for auto-enrollment and authentication. -The engineer must manage complete certificate lifecycle activities including certificate request, issuance, renewal, revocation, and troubleshooting of certificate-related issues across users, systems, and applications. Strong understanding of certificate store architecture and certificate chain validation is required to ensure trust relationships within enterprise environments. -The role requires implementation and maintenance of Certificate Policy (CP) and Certification Practice Statement (CPS) aligned to organizational security standards and compliance requirements. The candidate should also manage CRL infrastructure including base CRL and delta CRL, ensuring proper publication and accessibility via CDP and AIA locations. -The engineer should possess strong knowledge of cryptographic principles including asymmetric and symmetric encryption, hashing, and digital signatures along with practical understanding of PKCS standards, Cryptographic Service Providers (CSP), and Key Storage Providers (KSP). -The role involves supporting SSL/TLS certificates across internal and external applications and ensuring adherence to industry standards like X.509 and TLS protocols. Strong troubleshooting skills are required for resolving issues related to certificate enrollment, chain errors, CRL accessibility, and authentication failures. -The candidate must have good understanding of Active Directory including Group Policy, auto-enrollment configuration, and integration with PKI services for enterprise identity and access management. -The role includes ensuring PKI high availability, fault tolerance, and disaster recovery by implementing proper backup, restore, and redundancy mechanisms across CA servers and related infrastructure. -The engineer should work on operational support, monitoring PKI health, performing RCA for incidents, and maintaining documentation for PKI processes and environments. Optional skills include experience with Linux-based certificate management, OpenSSL tools, cloud PKI platforms (Azure/AWS), and HSM integration for secure key management.

NOTE: Wipro needs immediate joiners only

Monitoring and safeguarding the log sources and security access

Planning for disaster recovery in the event of any security breaches

Monitor for attacks, intrusions and unusual, unauthorized or illegal activity

Performs moderately complex log reviews and forensic analysis to identify unauthorized or unacceptable access to data or systems

Conduct security assessments, risk analysis and root cause analysis of security incidents

Handling incidents escalated by the L1 team in 24x7 rotational shifts

Use advanced analytics tools to determine emerging threat patterns and vulnerabilities

Completing all tactical security operations tasks associated with this engagement.

Analyses all the attacks and come up with remedial attack analysis

Conduct detailed analysis of incidents and create reports and dashboards

Liaise with stakeholders in relation to cyber security issues and provide future recommendations

Maintain an information security risk register and assist with internal and external audits relating to information security

Assist with the creation, maintenance and delivery of cyber security awareness training for colleagues

Advice and guidance to employees on issues such as spam and unwanted or malicious emails

No.

Performance Parameter

Measure

1.

Customer centricity

Timely security breach solutioning to end users, Internal stakeholders & external customers experience

2.

Process Adherence

Adherence to SLA s (90-95%), response time and resolution time TAT

Mandatory Skills: PKI - Certificate Management.

Experience: 5-8 Years.

Reinvent your world. We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them, we need people inspired by reinvention. Of yourself, your career, and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes, so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention.