CTO - PKI & Certificate Lifecycle Specialist

Job Description

6-10 years overall experience; at least 3-5 years in PKI operations, certificate management, network security, infrastructure security, IAM or server administration.

Own certificate discovery, PKI dependency analysis and lifecycle management inputs required for quantum-safe migration.

͏

Areas of responsibility

Monitoring and Incident Detection-Identify alerts and review log sources to detect unauthorized access, malware signatures, and suspicious network traffic

Incident Handling and Analysis-"Assist in triaging security incidents and document findings in the incident management system."

Threat Assessment and Analytics-Support vulnerability assessment activities and assist in gathering basic security data.

͏

Key Responsibilities

• Discover and document certificates used across TLS/SSL, code signing, S/MIME, internal services, APIs, load balancers, servers, cloud services and partner integrations.
• Capture certificate metadata including ownership, algorithm, key size, issuer, chain, expiry, usage, renewal method and associated application/service.
• Identify weak algorithms, outdated key sizes, unmanaged certificates and high-risk certificate dependencies.
• Support certificate renewal, revocation, replacement, installation and validation activities with client PKI and infrastructure teams.
• Maintain reporting for expiring certificates, non-compliant certificates and remediation progress.
• Document SOPs and runbooks for certificate migration, exception handling, key compromise and operational controls.
• Coordinate with application, infrastructure, IAM, cloud and security operations teams to align certificate remediation with PQC roadmap.

͏

Required Skills

• Strong understanding of X.509, CA/RA models, CRL, OCSP, TLS/SSL, certificate chains, CSRs, key generation and digital signatures.
• Exposure to enterprise PKI or certificate management platforms and operational workflows.
• Basic scripting ability in Python, PowerShell or Bash for reporting, inventory extraction and automation support.
• Working knowledge of Windows/Linux server environments, load balancers, web servers, cloud services and common deployment models.
• Operational discipline for runbooks, change coordination, outage prevention and audit evidence.

͏