PKI Certificate Management - Security Identity Engineer
BengaluruFull-time7–13 yrsPosted over a month ago
Senior identity and access role at LSEG in Bengaluru. Needs 7+ years and a B.Sc, B.Tech or B.E..
About the role
The Security PKI Engineer will be responsible for engineering, operating, and continuously improving LSEG’s Public Key Infrastructure (PKI) and Certificate Lifecycle Management (CLM) capabilities. This role ensures trusted identity, authentication, and encryption services are reliable, scalable, and secure across enterprise and cloud environments.
What you'll do
- Engineer, administer, and maintain PKI components including Root, Intermediate, and Issuing Certificate Authorities
- Operating and supporting certificate validation and distribution services including CRLs, OCSP, AIA, and CDP
- Executing end-to-end certificate lifecycle processes: request validation, issuance, renewal, revocation, and retirement
- Ensuring essential PKI and CLM processes meet high-quality standards through strong operational controls, documentation, and repeatable runbooks
- Maintaining certificate inventory hygiene and reduce operational risk by proactively addressing expirations and crypto compliance gaps
What you need
- Incident response
- IAM
- Cloud security
- Python
- Firewalls
- AWS
Good to have
- GCP
- Azure
- Active Directory
- TCP/IP
- PowerShell
- Bash