We are seeking a highly skilled and motivated Assistant Manager – PKI & HSM to lead the administration, maintenance, and optimization of the organization's Public Key Infrastructure (PKI) and Hardware Security Module (HSM) ecosystem. The role will be responsible for certificate lifecycle management, key management, HSM operations (on-premises and cloud), and integration of PKI services across Identity and Access Management (IAM) platforms. The ideal candidate will possess strong technical expertise in cryptography, PKI operations, certificate management, automation, and stakeholder engagement.
The ideal candidate will:
HSM Administration & Key Management
§Minimum 6+ years of hands-on experience administering Thales Luna Network HSMs, including partition management, client registration, HA configuration, backup/restore, firmware upgrades, and integration with Microsoft PKI environments.
§Administer and maintain Hardware Security Modules (HSMs) across on-premises and cloud environments.
§Manage cryptographic keys, hardware-backed certificate generation, key ceremonies, backup, recovery, and rotation activities.
§Ensure secure deployment and configuration of hardware-based keys supporting privileged access and critical enterprise applications.
§Monitor HSM health, capacity, availability, and security compliance.
PKI & Certificate Lifecycle Management
§Manage end-to-end certificate lifecycle processes including onboarding, issuance, renewal, rekeying, revocation, and decommissioning of digital certificates.
§Provision and manage PKI certificates for servers, applications, devices, and services requiring secure authentication and encryption.
§Administer and support Certificate Lifecycle Management (CLM) platforms to ensure compliance and operational efficiency.
§Renew and maintain Root Certificate Authority (CA) and Issuing CA certificates while ensuring minimal business impact.
Operational Support & Compliance
§Provide L2/L3 operational support for PKI and HSM infrastructure, ensuring high availability and service reliability.
§Support application teams with secure certificate deployment, installation, troubleshooting, and remediation activities.
§Partner with vulnerability and network scanning teams to conduct periodic discovery scans and identify unmanaged certificates, keys, and cryptographic assets.
§Investigate certificate-related incidents, outages, and security events, ensuring timely resolution and root cause analysis.
Maintain compliance with enterprise security standards, cryptographic policies, and regulatory requirements.
Certification Required:
•Thales Luna HSM Administrator Certification (Mandatory)
•Microsoft PKI / Active Directory Certificate Services (ADCS) certification (Preferred)
•CISSP, CCSP, or other Information Security certifications (Preferred)
•ITIL Foundation certification. (Preferred)
Behavioral / team skills
•Excellent communication (written and verbal) and interpersonal skills
•Ready to work in Shifts (on 3 shift rotation pattern)
•Flexibility to adapt to a variety of engagement types, working hours and work environments and locations
•Proven ability to work creatively and analytically in a problem-solving environment
•Desire to learn and contribute
•Focused and self-motivated approach to work
•Personal drive and positive work ethic to deliver results within tight deadlines and in demanding situations
The ideal candidate will:
HSM Administration & Key Management
§Minimum 6+ years of hands-on experience administering Thales Luna Network HSMs, including partition management, client registration, HA configuration, backup/restore, firmware upgrades, and integration with Microsoft PKI environments.
§Administer and maintain Hardware Security Modules (HSMs) across on-premises and cloud environments.
§Manage cryptographic keys, hardware-backed certificate generation, key ceremonies, backup, recovery, and rotation activities.
§Ensure secure deployment and configuration of hardware-based keys supporting privileged access and critical enterprise applications.
§Monitor HSM health, capacity, availability, and security compliance.
PKI & Certificate Lifecycle Management
§Manage end-to-end certificate lifecycle processes including onboarding, issuance, renewal, rekeying, revocation, and decommissioning of digital certificates.
§Provision and manage PKI certificates for servers, applications, devices, and services requiring secure authentication and encryption.
§Administer and support Certificate Lifecycle Management (CLM) platforms to ensure compliance and operational efficiency.
§Renew and maintain Root Certificate Authority (CA) and Issuing CA certificates while ensuring minimal business impact.
Operational Support & Compliance
§Provide L2/L3 operational support for PKI and HSM infrastructure, ensuring high availability and service reliability.
§Support application teams with secure certificate deployment, installation, troubleshooting, and remediation activities.
§Partner with vulnerability and network scanning teams to conduct periodic discovery scans and identify unmanaged certificates, keys, and cryptographic assets.
§Investigate certificate-related incidents, outages, and security events, ensuring timely resolution and root cause analysis.
Maintain compliance with enterprise security standards, cryptographic policies, and regulatory requirements.
Certification Required:
•Thales Luna HSM Administrator Certification (Mandatory)
•Microsoft PKI / Active Directory Certificate Services (ADCS) certification (Preferred)
•CISSP, CCSP, or other Information Security certifications (Preferred)
•ITIL Foundation certification. (Preferred)
Behavioral / team skills
•Excellent communication (written and verbal) and interpersonal skills
•Ready to work in Shifts (on 3 shift rotation pattern)
•Flexibility to adapt to a variety of engagement types, working hours and work environments and locations
•Proven ability to work creatively and analytically in a problem-solving environment
•Desire to learn and contribute
•Focused and self-motivated approach to work
•Personal drive and positive work ethic to deliver results within tight deadlines and in demanding situations