TC-CS-Data Protection and Privacy-PKI-Senior

Key Responsibilities

• Perform end‑to‑end discovery of SSH keys, SSL/TLS certificates, and cryptographic assets across hybrid environments.
• Analyze key and certificate usage patterns, identify security gaps, and recommend remediation strategies.
• Support secure lifecycle management practices for SSH keys and SSL/TLS certificates, including rotation, revocation, and access controls.
• Conduct cryptographic discovery within applications, services, and infrastructure to identify cryptographic primitives and algorithms in use.
• Assess cryptographic posture and readiness of systems and applications against emerging quantum computing threats.
• Collaborate with architecture and engineering teams to evaluate and implement quantum‑safe cryptographic solutions.
• Contribute to the development of security documentation, standards, and operational procedures.

Required Skills

• Minimum 3–5 years of experience in Cybersecurity, preferably in cryptography, PKI, or certificate lifecycle management.
• Hands‑on experience with platforms such as Venafi, AppViewX, Thales, Sectigo, MSFT AD‑CS, or similar.
• Experience in discovery, assessment, and management of enterprise cryptographic assets.
• Strong understanding of cryptographic principles, PKI, SSL/TLS, SSH, and trust models.
• Familiarity with Linux/Unix/Windows administration, scripting (Python, Bash, PowerShell), and automation.
• Exposure to cloud platforms (AWS, Azure, GCP) and native key/certificate services.
• Strong communication, analytical, and collaboration skills.