Technical Solutions Architect - Public Key Infrastructure (PKI)

About NTT DATA

NTT DATA is a global leader in business and technology services with annual revenues exceeding 30 billion USD, servicing 75% of the Fortune Global 100. The company emphasizes accelerating client success and driving societal benefit through responsible innovation. Recognized as a frontrunner in AI and digital infrastructure, NTT DATA offers expertise across cloud, security, connectivity, data centers, and application services, supported by innovation centers and partnerships worldwide. Headquartered within the NTT Group, the company invests heavily in research and development to maintain cutting-edge solutions.

Position Overview

We are seeking an experienced PKI and Encryption Specialist to join our teams in Bangalore, Noida, or Hyderabad. This full-time role is office-based (Monday through Friday) and involves managing enterprise Public Key Infrastructure (PKI) and encryption solutions. The ideal candidate will possess deep knowledge of PKI implementations, cryptographic security, certificate lifecycle management, and key management systems.

Key Duties

• Oversee and maintain enterprise PKI platforms, including Microsoft ADCS, PrimeKey EJBCA, and Entrust.
• Handle the entire lifecycle management of X.509 digital certificates, such as issuance, renewal, and revocation.
• Manage cryptographic keys securely using Hardware Security Modules (HSMs) covering key generation, distribution, storage, and governance.
• Implement automation for certificate enrollment and renewal processes using technologies like SCEP, EST, and REST APIs.
• Develop and enforce Certificate Policies (CP) and Certification Practice Statements (CPS) in compliance with standards like NIST and FIPS.
• Lead crypto-agility initiatives including transitioning from legacy cryptographic algorithms and preparing for post-quantum cryptography advancements.

Preferred Experience and Skills

• Proficient with cryptographic protocols such as TLS/SSL, SSH, PGP, and IPsec.
• Experienced in integrating Active Directory (AD), LDAP with PKI for automatic certificate enrollment.
• Practical experience with encryption and key management platforms, including Gemalto KeySecure, Thales CipherTrust, and HashiCorp Vault.
• Familiarity with cloud security and PKI solutions like AWS Certificate Manager, Azure Key Vault, and PKI-as-a-Service (PKIaaS) offerings.

Candidate Information Requested

• Total professional experience.
• Specific exposure to PKI implementations.
• Experience in encryption and key management technologies.
• Familiarity working with Hardware Security Module (HSM) solutions.
• Current and expected compensation details.
• Notice period and current location.
• Willingness to relocate and commitment to work onsite five days a week.