Description

You will lead certificate lifecycle management and identity access operations within a large-scale enterprise environment.

This role is on-site.

Responsibilities

• Manage the full certificate lifecycle, including issuance, revocation, renewal, and inventory for internal and external certificates.
• Perform daily health checks on Active Directory Certificate Services (ADCS) to analyze infrastructure risks and alerts.
• Implement authentication and authorization flows through Identity and Access Management systems.
• Maintain certificate templates, policies, and key management documentation.
• Support IAM operational incidents, troubleshooting workflow failures, and managing tool patching and restarts.

Required Skills

• 6+ years of professional experience with Public Key Infrastructure (PKI) and Identity Management solutions.
• Deep expertise in certificate management using Entrust, Venafi, Microsoft, or Google.
• Hands-on experience with ForgeRock (OpenAM, OpenDJ, OpenIDM, OpenIG) and custom Java development.
• Proficiency with SAML, OAuth, and OpenID Connect protocols.
• Experience managing Microsoft Certificate Authority and enterprise Key Management.
• Strong understanding of AD, Exchange, Windows, and Linux OS environments.
• Practical knowledge of Hardware Security Modules (HSM), KMIP, and cryptography.
• Experience using Jenkins for automation and Looker or Tableau for dashboard creation.
• Familiarity with ServiceNow for Change, Incident, and Problem management.

Preferred Skills

• Knowledge of HIPAA, SOX, and PCI regulations.
• Understanding of Identity Governance and Administration (IGA) frameworks.

Key Skills

Education

Any Graduate