Consultant · PKI
- Location Noida, Uttar Pradesh, India
- Experience 4 yrs
- Job type Full-time
- Posted 8 Oct 2026
- Qualification Master's / Bachelor's
You will be taken to KPMG’s own careers page to apply. Job ID 30050652.
Job description
We are seeking an experienced Consultant – Level L3 with minimum 48 months of experience to join our Identity Management team, focusing on Public Key Infrastructure (PKI), certificate lifecycle management, certificate authorities and enterprise cryptographic services. The ideal candidate will support design, implementation, L3 operations, audits, automation and service improvement for enterprise PKI environments
Responsibilities
•Minimum 48 months of experience in PKI, certificate services, cybersecurity, infrastructure security or identity management operations. •In-depth knowledge of PKI technologies including encryption algorithms, certificate authorities, certificate chains and key management practices. •Experience with major PKI tools and solutions such as Microsoft Active Directory Certificate Services, Entrust, DigiCert or similar platforms. •Strong understanding of security protocols such as TLS, SSL and IPsec. •Hands-on experience with certificate templates, CRL/OCSP, certificate enrollment, renewal, revocation and PKI monitoring activities. •Good understanding of certificate-based authentication, smart card / device certificates, web server certificates and enterprise trust models. •Ability to troubleshoot certificate chain validation, expired certificates, revocation failures, enrollment issues and application certificate errors. Experience with documentation, audit evidence preparation, compliance checks, SOPs, operational reporting and client updates §Design, implement and support PKI solutions that meet organizational security and compliance requirements. §Develop and maintain best practices for PKI architecture, certificate authorities, key management and cryptographic protocols. §Provide L3 support for certificate issuance, renewal, revocation, enrollment, template, chain validation and authentication-related issues. §Manage the lifecycle of digital certificates from issuance to revocation across enterprise applications, users, devices and services. §Implement or support automation frameworks for certificate renewals, distribution, monitoring and compliance checks. §Conduct regular reviews, audits and assessments of PKI infrastructure to identify weaknesses and improvement areas. §Collaborate with Security, Operations, Application Owners and Service Providers on incidents, changes, risk remediation and service improvements. Build strong professional relationships with client personnel and communicate complex PKI topics clearly to technical and non-technical stakeholders