Cyber IAM Managed Service - PKI HSM Assistant Manager
Kpmg India Services LlpBengaluru/Bangalore
Not disclosed
Work from Office
Full Time
Min. 6 yearsJob Description
Cyber IAM Managed Service - PKI HSM Assistant Manager
We are seeking a highly skilled and motivated Assistant Manager – PKI & HSM to lead the administration, maintenance, and optimization of the organization's Public Key Infrastructure (PKI) and Hardware Security Module (HSM) ecosystem. The role will be responsible for certificate lifecycle management, key management, HSM operations (on-premises and cloud), and integration of PKI services across Identity and Access Management (IAM) platforms. The ideal candidate will possess strong technical expertise in cryptography, PKI operations, certificate management, automation, and stakeholder engagement.
The ideal candidate will:
HSM Administration & Key Management
§Minimum 6+ years of hands-on experience administering Thales Luna Network HSMs, including partition management, client registration, HA configuration, backup/restore, firmware upgrades, and integration with Microsoft PKI environments.
§Administer and maintain Hardware Security Modules (HSMs) across on-premises and cloud environments.
§Manage cryptographic keys, hardware-backed certificate generation, key ceremonies, backup, recovery, and rotation activities.
§Ensure secure deployment and configuration of hardware-based keys supporting privileged access and critical enterprise applications.
§Monitor HSM health, capacity, availability, and security compliance.
PKI & Certificate Lifecycle Management
§Manage end-to-end certificate lifecycle processes including onboarding, issuance, renewal, rekeying, revocation, and decommissioning of digital certificates.
§Provision and manage PKI certificates for servers, applications, devices, and services requiring secure authentication and encryption.
§Administer and support Certificate Lifecycle Management (CLM) platforms to ensure compliance and operational efficiency.
§Renew and maintain Root Certificate Authority (CA) and Issuing CA certificates while ensuring minimal business impact.
Operational Support & Compliance
§Provide L2/L3 operational support for PKI and HSM infrastructure, ensuring high availability and service reliability.
§Support application teams with secure certificate deployment, installation, troubleshooting, and remediation activities.
§Partner with vulnerability and network scanning teams to conduct periodic discovery scans and identify unmanaged certificates, keys, and cryptographic assets.
§Investigate certificate-related incidents, outages, and security events, ensuring timely resolution and root cause analysis.
Maintain compliance with enterprise security standards, cryptographic policies, and regulatory requirements.
Certification Required:
•Thales Luna HSM Administrator Certification (Mandatory)
•Microsoft PKI / Active Directory Certificate Services (ADCS) certification (Preferred)
•CISSP, CCSP, or other Information Security certifications (Preferred)
•ITIL Foundation certification. (Preferred)
Behavioral / team skills
•Excellent communication (written and verbal) and interpersonal skills
•Ready to work in Shifts (on 3 shift rotation pattern)
•Flexibility to adapt to a variety of engagement types, working hours and work environments and locations
•Proven ability to work creatively and analytically in a problem-solving environment
•Desire to learn and contribute
•Focused and self-motivated approach to work
•Personal drive and positive work ethic to deliver results within tight deadlines and in demanding situations
The ideal candidate will:
HSM Administration & Key Management
§Minimum 6+ years of hands-on experience administering Thales Luna Network HSMs, including partition management, client registration, HA configuration, backup/restore, firmware upgrades, and integration with Microsoft PKI environments.
§Administer and maintain Hardware Security Modules (HSMs) across on-premises and cloud environments.
§Manage cryptographic keys, hardware-backed certificate generation, key ceremonies, backup, recovery, and rotation activities.
§Ensure secure deployment and configuration of hardware-based keys supporting privileged access and critical enterprise applications.
§Monitor HSM health, capacity, availability, and security compliance.
PKI & Certificate Lifecycle Management
§Manage end-to-end certificate lifecycle processes including onboarding, issuance, renewal, rekeying, revocation, and decommissioning of digital certificates.
§Provision and manage PKI certificates for servers, applications, devices, and services requiring secure authentication and encryption.
§Administer and support Certificate Lifecycle Management (CLM) platforms to ensure compliance and operational efficiency.
§Renew and maintain Root Certificate Authority (CA) and Issuing CA certificates while ensuring minimal business impact.
Operational Support & Compliance
§Provide L2/L3 operational support for PKI and HSM infrastructure, ensuring high availability and service reliability.
§Support application teams with secure certificate deployment, installation, troubleshooting, and remediation activities.
§Partner with vulnerability and network scanning teams to conduct periodic discovery scans and identify unmanaged certificates, keys, and cryptographic assets.
§Investigate certificate-related incidents, outages, and security events, ensuring timely resolution and root cause analysis.
Maintain compliance with enterprise security standards, cryptographic policies, and regulatory requirements.
Certification Required:
•Thales Luna HSM Administrator Certification (Mandatory)
•Microsoft PKI / Active Directory Certificate Services (ADCS) certification (Preferred)
•CISSP, CCSP, or other Information Security certifications (Preferred)
•ITIL Foundation certification. (Preferred)
Behavioral / team skills
•Excellent communication (written and verbal) and interpersonal skills
•Ready to work in Shifts (on 3 shift rotation pattern)
•Flexibility to adapt to a variety of engagement types, working hours and work environments and locations
•Proven ability to work creatively and analytically in a problem-solving environment
•Desire to learn and contribute
•Focused and self-motivated approach to work
•Personal drive and positive work ethic to deliver results within tight deadlines and in demanding situations
Experience Level
Senior LevelJob role
Work locationBangalore, Karnataka, India
DepartmentIT & Information Security
Role / CategoryIT Security
Employment typeFull Time
ShiftDay Shift
Job requirements
ExperienceMin. 6 years
About company
NameKpmg India Services Llp
Job posted by Kpmg India Services Llp
Similar jobs you can apply for
Accounts / FinanceField Installation Engineer
AirtelElectronics City, Bengaluru/Bangalore
₹25,000 - ₹42,000*
Field JobFull TimeAny experience
No English RequiredLaptop Hardware Technician
Cloudline InfotechMahadevapura, Bengaluru/Bangalore
₹15,500 - ₹28,500*
Field JobFull TimeAny experienceBasic English
Field Desktop Support Engineer
Crown TechnologiesYelahanka, Bengaluru/Bangalore
₹20,000 - ₹30,000
Field JobFull TimeMin. 3 yearsGood (Intermediate / Advanced) EnglishField Installation Engineer
Reliance JioBommanahalli, Bengaluru/Bangalore
₹17,000 - ₹18,000
Field Job
Part TimeFull TimeAny experienceNo English RequiredLaptop Repair Technician
Unaxo SolutionsHSR Layout, Bengaluru/Bangalore
₹10,000 - ₹20,000*
Work from OfficeFull TimeMin. 6 monthsBasic English
Laptop Technician
Getsetfix TechnologyBellandur, Bengaluru/Bangalore
₹18,000 - ₹40,000*
Field JobFull TimeMin. 1 yearNo English RequiredYou can expect a minimum salary of 0 INR. The salary offered will depend on your skills, experience and performance in the interview.
The candidate should have completed the required education and people who have 6 to 31 years are eligible to apply for this job. You can apply for more jobs in Bengaluru/Bangalore to get hired quickly.
The candidate should have sound communication skills and sound communication skills for this job.
Both Male and Female candidates can apply for this job.
No, it's not a work from home job and can't be done online. You can explore and apply for other work from home jobs in Bengaluru/Bangalore at apna.
No work-related deposit needs to be made during your employment with the company.
Go to the apna app and apply for this job. Click on the apply button and call HR directly to schedule your interview.
The last date to apply for this job is . For more details, download apna app and find Full Time jobs in Bengaluru/Bangalore . Through apna, you can find jobs in 64 cities across India. Join NOW!