PKI L3 Analyst

Greetings!

We are hiring for TCS Client!

Job Title: Public Key Infrastructure (PKI) L3 Analyst

Experience: 5-8 Years

Location : Remote

Role Overview

We are looking for an experienced PKI L3 Analyst to manage, administer, and troubleshoot enterprise Public Key Infrastructure (PKI) services. The candidate will be responsible for certificate lifecycle management, Microsoft Active Directory Certificate Services (AD CS), cryptographic services, and advanced L3 incident resolution.

The role requires strong hands-on experience in enterprise PKI environments, complex certificate troubleshooting, root cause analysis, and security compliance.

Key Responsibilities

• Administer and maintain enterprise PKI infrastructure, including Root CA, Intermediate CA, and Issuing CA.
• Manage Microsoft Active Directory Certificate Services (AD CS), certificate templates, certificate policies, and auto-enrollment.
• Handle the complete certificate lifecycle, including issuance, renewal, revocation, and replacement of digital certificates.
• Troubleshoot SSL/TLS certificate issues, certificate chain validation failures, trust-store problems, and TLS handshake errors.
• Manage Certificate Revocation Lists (CRL), delta CRLs, and Online Certificate Status Protocol (OCSP) services.
• Handle complex P1/P2 incidents escalated by L1/L2 teams and perform root cause analysis (RCA).
• Troubleshoot certificate expiry, mismatched certificates, incorrect templates, and Extended Key Usage (EKU) issues.
• Support certificate signing requests (CSRs), public/private key management, key rotation, and secure key storage.
• Administer Hardware Security Modules (HSMs), where applicable.
• Develop and maintain PowerShell scripts for certificate discovery, expiry monitoring, reporting, and operational automation.
• Support PKI upgrades, CA renewals, server migrations, and infrastructure changes.
• Maintain technical documentation, troubleshooting guides, operational procedures, and knowledge articles.
• Ensure compliance with enterprise security policies, cryptographic standards, access controls, and audit requirements.
• Collaborate with application, infrastructure, network, cloud, and security teams to resolve certificate-related issues.