01
TRPD-26-06787
PKI Senior Engineer
The PKI Senior Engineer will manage digital certificate lifecycle processes and the technical infrastructure that supports issuance, renewal, and revocation, including high- and low-level designs, product certification, and integration with a bank’s core platforms. Essential skills include Windows system engineering, scripting with Bash, PowerShell, or Python, PKI technologies such as Venafi and Microsoft Certificate Services, X.509, SSL/TLS, and hands-on Microsoft CA installation and configuration. The role also requires certificate templates, automated enrollment, SCEP and NDES, plus general Windows/Linux, IIS, Active Directory, network, and cloud KMS knowledge. OpenShift, containers, Jetstack cert-manager, HSM experience—especially SafeNet/Gemalto—and relevant security certifications are desirable. The structured inputs specify 5–15 years of experience, permanent employment, and Pune; the description does not state a more specific experience band or work arrangement.
Position summary
- Location
- India
- Workplace
- On-site
- Employment
- Full Time
- Experience
- Minimum 5 years and Maximum 15 years
Role overview
Why This Role Matters.
The PKI Senior Engineer will manage digital certificate lifecycle processes and the technical infrastructure that supports issuance, renewal, and revocation, including high- and low-level designs, product certification, and integration with a bank’s core platforms. Essential skills include Windows system engineering, scripting with Bash, PowerShell, or Python, PKI technologies such as Venafi and Microsoft Certificate Services, X.509, SSL/TLS, and hands-on Microsoft CA installation and configuration. The role also requires certificate templates, automated enrollment, SCEP and NDES, plus general Windows/Linux, IIS, Active Directory, network, and cloud KMS knowledge. OpenShift, containers, Jetstack cert-manager, HSM experience—especially SafeNet/Gemalto—and relevant security certifications are desirable. The structured inputs specify 5–15 years of experience, permanent employment, and Pune; the description does not state a more specific experience band or work arrangement.
Your Impact
Deliver Enterprise Value
Help organisations solve complex business problems through modern technology, consulting expertise and measurable outcomes.
Collaboration
Work Across Teams
Collaborate with consultants, architects, engineers and client stakeholders throughout the project lifecycle.
Growth
Learn Continuously
Gain exposure to enterprise technologies, certifications, mentoring and real-world project experience.
Career Path
Grow With Ubique
Build a long-term consulting career with opportunities to take on greater responsibility and leadership over time.
Responsibilities
What You'll Be Doing.
Every role at Ubique contributes directly to solving meaningful business challenges for our clients.
02
Working Experience with Windows as System Engineer
03
Proficient scripting skills using Bash, Powershell, Python similar technologies
04
Experience in PKI in particular: Venafi, Microsoft Certificate Management Services, X.509 standard, SSL certificate management concepts.
05
General knowledge of infrastructure (Windows, Linux, IIS, AD), network (firewalls, load balancers) and cloud security (with focus on cloud based KMS).
06
Hands on Installation & configuration of MS CA
07
Customization of certificate template, automated Certificate enrollment
08
Working Experience with Redhat Openshift, Containers & Cert manager (Jetstack) would be added advantage
09
Experience with hardware security module (HSM) technology. Direct experience with Safenet HSM (Gemalto) platforms is highly desirable.
10
A security industry certification including but not limited to CISSP, SSCP, CISM, SANS GSEC, ECSA, ECSP, Security+, MCSE, RHCE, CCNE, CCSE will be an additional asset
Technology stack
Tools & Technologies.
The platforms and technologies you'll use to build modern, enterprise-grade solutions.
01
PKI
Required
02
Public Key Infrastructure
Required
03
Venafi
Required
04
Microsoft Certificate Services
Required
05
Microsoft CA
Required
06
Active Directory Certificate Services
Required
07
AD CS
Required
08
X.509
Required
09
SSL
Required
10
TLS
Required
11
SCEP
Required
12
NDES
Required
13
ACME
Required
14
Bash
Required
15
PowerShell
Required
16
Python
Required
17
Windows Server
Required
18
Linux
Required
19
IIS
Required
20
Active Directory
Required
Requirements
Skills & Experience.
We value curiosity, collaboration and continuous learning. If you don't meet every requirement but believe you can make an impact, we'd still love to hear from you.
Essential
Required Qualifications
Windows system engineering
Scripting with Bash, PowerShell, Python, or similar technologies
PKI concepts and certificate lifecycle management
Venafi experience
Microsoft Certificate Services / Microsoft CA installation and configuration
X.509 certificate standard
SSL/TLS certificate management and TLS knowledge
Certificate template customization and automated certificate enrollment
SCEP and NDES
Infrastructure knowledge: Windows, Linux, IIS, and Active Directory
Network knowledge: firewalls and load balancers
Cloud security knowledge, particularly cloud-based KMS
High- and low-level design, product certification, and platform integration
Bachelor’s or Master’s degree in a relevant field, or equivalent education and practical domain experience
Preferred
Nice to Have
Red Hat OpenShift
Containers
Jetstack cert-manager
Hardware security modules (HSM)
SafeNet / Gemalto HSM platforms
ACME protocol
Security certifications such as CISSP, SSCP, CISM, GSEC, ECSA, ECSP, Security+, MCSE, RHCE, CCNE, or CCSE
What you'll gain
More Than Just A Job.
We're committed to helping every team member grow professionally, personally and technically while working on meaningful projects.
Global Exposure
Collaborate with international clients and multicultural teams on enterprise programmes.
Continuous Learning
Expand your expertise through mentoring, certifications and hands-on project experience.
Career Growth
Take ownership, develop leadership skills and grow your consulting career over time.
Flexible Working
Hybrid and remote collaboration designed around trust and delivering exceptional outcomes.
People First
Join a supportive culture where collaboration, respect and long-term relationships come first.
Enterprise Projects
Work on meaningful technology initiatives for leading organisations across industries.
Apply
Apply for PKI Senior Engineer
One page, about two minutes. We only ask for what we actually need to have a first conversation.