Senior Enterprise Technology Engineer

bp launchpad • India
Relocation
Apply
AI Summary

We are seeking a skilled and detail-oriented PKI Engineer to build, implement, and maintain Public Key Infrastructure (PKI) systems across internal and external environments. The ideal candidate will have hands-on experience with Microsoft ADCS, certificate lifecycle management (Venafi), and integration with external PKI providers. This role is critical to ensuring secure authentication, encryption, and digital signing across enterprise systems.

Key Highlights
PKI Engineer
Microsoft ADCS
Certificate Lifecycle Management
Key Responsibilities
Build, deploy, and handle Internal CA hierarchy (Root CA, Subordinate CA) using Microsoft ADCS.
Integrate and handle External PKI services (e.g., DigiCert) for public-facing applications and services.
Implement and maintain certificate lifecycle management using platforms like Venafi
Technical Skills Required
Microsoft ADCS Venafi X.509 certificate standards TLS/SSL Active Directory LDAP Kerberos authentication HSMs (Hardware Security Modules) ACME clients
Benefits & Perks
Full-time employment
Relocation available
Up to 10% travel expected
Nice to Have
Certified Information Systems Security Professional (CISSP)
Certified PKI Professional (CPKI)
Venafi or Keyfactor platform certifications

Job Description


Full time

Senior Enterprise Technology Engineer

India, Pune

2026-02-03

1 day ago

IT&S

Apply

  • Facebook
  • Linkedin
  • Twitter
  • Instagram
  • Email
  • Copy Link

Full time

RQ105361

Senior Enterprise Technology Engineer

India, Pune

Save job icon

Save Job

You have successfully copied the job URL to clipboard!

Job category

IT&S

Experience level

Intermediate

Relocation available

This role is eligible for relocation within country

Job type

Professionals

Travel required

Up to 10% travel should be expected with this role

Job code

RQ105361

Job category

IT&S

Job type

Professionals

Experience level

Intermediate

Travel required

Up to 10% travel should be expected with this role

Relocation available

This role is eligible for relocation within country

Job code

RQ105361

Job Description

Job Summary

We are seeking a skilled and detail-oriented PKI Engineer to build, implement, and maintain Public Key Infrastructure (PKI) systems across internal and external environments. The ideal candidate will have hands-on experience with Microsoft ADCS, certificate lifecycle management (Venafi), and integration with external PKI providers. This role is critical to ensuring secure authentication, encryption, and digital signing across enterprise systems.

Key Responsibilities

  • Build, deploy, and handle Internal CA hierarchy (Root CA, Subordinate CA) using Microsoft ADCS.
  • Integrate and handle External PKI services (e.g., DigiCert) for public-facing applications and services.
  • Implement and maintain certificate lifecycle management using platforms like Venafi
  • Ensure compliance with security policies, certificate guidelines, and industry standards (e.g., NIST).
  • Handle CRL and OCSP configurations, including load balancing and high availability.
  • Monitor and fix PKI-related issues including certificate enrollment, revocation, and authentication failures.
  • Collaborate with security, infrastructure, and application teams to support secure communications and identity assurance.
  • Maintain documentation for PKI architecture, processes, and operational procedures.
  • Support code signing, document signing, and device authentication use cases.
  • Evaluate and implement post-quantum cryptography readiness strategies.

Required Skills & Qualifications

  • Bachelor's degree in computer science, Information Security, or related field.
  • Demonstrated ability in PKI engineering or related security infrastructure roles.
  • Proven understanding of Microsoft ADCS, including offline Root CA and online Subordinate CA setup.
  • Experience with HSMs (Hardware Security Modules) for key protection.
  • Familiarity with external PKI providers and certificate issuance processes.
  • Understanding of X.509 certificate standards, TLS/SSL
  • Experience with certificate automation tools (e.g., Venafi, ACME clients).
  • Knowledge of Active Directory, LDAP, and Kerberos authentication.
  • Awareness of quantum-safe cryptography and emerging PKI trends.
  • Strong analytical and problem-solving skills.
  • Excellent communication and documentation abilities.

Preferred Certifications

  • Microsoft Certified: Cybersecurity Architect / Identity and Access Administrator
  • Certified Information Systems Security Professional (CISSP)
  • Certified PKI Professional (CPKI)
  • Venafi or Keyfactor platform certifications (if applicable)

About Bp

Our purpose is to deliver energy to the world, today and tomorrow. For over 100 years, bp has focused on discovering, developing, and producing oil and gas in the nations where we operate. We are one of the few companies globally that can provide governments and customers with an integrated energy offering. Delivering our strategy sustainably is fundamental to achieving our ambition to be a net zero company by 2050 or sooner!

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status.

Even though the job is advertised as full time, please contact the hiring manager or the recruiter as flexible working arrangements may be considered.

Legal Disclaimer

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, socioeconomic status, neurodiversity/neurocognitive functioning, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp’s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us.

If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.

Show more

Apply

  • Facebook
  • Linkedin
  • Twitter
  • Instagram
  • Email
  • Copy Link

Full time

RQ105361

Senior Enterprise Technology Engineer

India, Pune

Save job icon

Save Job

You have successfully copied the job URL to clipboard!

Similar Jobs

Explore other opportunities that match your interests

Senior Information Security and Compliance Specialist

Networking
•
2h ago

Premium Job

Sign up is free! Login or Sign up to view full details.

•••••• •••••• ••••••
Job Type ••••••
Experience Level ••••••

Mondelēz International

India

Network Engineer

Networking
•
8h ago
Visa Sponsorship Relocation Remote
Job Type Full-time
Experience Level Mid-Senior level

tachyon security bv

India

Staff Program Manager

Networking
•
9h ago

Premium Job

Sign up is free! Login or Sign up to view full details.

•••••• •••••• ••••••
Job Type ••••••
Experience Level ••••••

Bugcrowd

India

Subscribe our newsletter

New Things Will Always Update Regularly