KPMG—Associate Consultant · PKI

Job description

Description: We are seeking a skilled and motivated with minimum 24 months of experience to join our Identity Management team, focusing on Public Key Infrastructure (PKI), certificate lifecycle management, certificate authorities and enterprise cryptographic services. The ideal candidate will support PKI operations, certificate lifecycle activities, incident resolution, audits, automation support and service improvement for enterprise PKI environments Requirements: Graduation degree in any stream or equivalent / post-graduation degree/diploma, Certification in any IAM product would be an added advantage Certified PKI Professional (CPKI), Microsoft PKI / AD CS training, or any relevant security / PKI certification preferred Responsibilities: - §Minimum 24 months of experience in PKI, certificate services, cybersecurity, infrastructure security or identity management operations.​ - §Good knowledge of PKI technologies including encryption algorithms, certificate authorities, certificate chains and key management practices.​ - §Hands-on exposure to PKI tools and solutions such as Microsoft Active Directory Certificate Services, Entrust, DigiCert or similar platforms.​ - §Good understanding of security protocols such as TLS, SSL and IPsec.​ - §Hands-on exposure to certificate templates, CRL/OCSP, certificate enrollment, renewal, revocation and PKI monitoring activities.​ Basic to good understanding of certificate-based authentication, smart card / device certificates, web server certificates and enterprise trust models §Ability to support troubleshooting for certificate chain validation, expired certificates, revocation failures, enrollment issues and application certificate errors.​ §Good documentation skills for audit evidence preparation, compliance checks, SOPs, operational reporting and client updates §Support design, implementation and operation of PKI solutions that meet organizational security and compliance requirements.​ §Follow and contribute to best practices for PKI architecture, certificate authorities, key management and cryptographic protocols.​ §Provide L2 support for certificate issuance, renewal, revocation, enrollment, template, chain validation and authentication-related issues using defined runbooks and tools.​ §Support the lifecycle of digital certificates from issuance to revocation across enterprise applications, users, devices and services.​ §Support automation frameworks for certificate renewals, distribution, monitoring and compliance checks.​ §Assist with regular reviews, audits and assessments of PKI infrastructure to identify weaknesses and improvement areas.​ §Collaborate with Security, Operations, Application Owners and Service Providers on incidents, changes and service improvement activities.​ Build strong professional working relationships with client personnel and communicate PKI topics clearly to technical and non-technical stakeholders