Cyber Security Engineer 3

Job Summary

Job Description

Experience: 5 to 7.5 Years
Location: Chennai
Shift: General shift

About the Role

Universal is seeking a skilled PKI Engineer with 5+ years of hands-on experience in designing, implementing, and maintaining enterprise-scale public key infrastructure (PKI) solutions. This role will be integral to our Identity and Security teams, ensuring the security, scalability, and automation of certificate services across multiple platforms and applications.
Mandatory Skills: PKI,Venafi,HSM,OSCP,HSM,Powershell,PKI Certificate
 

Key Responsibilities

• Manage, maintain, and optimize enterprise PKI services, including issuing, renewing, and revoking digital certificates.
• Administer and integrate Hardware Security Modules (HSMs) to secure private key storage and cryptographic operations.
• Design, implement, and troubleshoot certificate chains, public/private key pairs, and intermediate/root CAs to ensure trust and compliance.
• Build and maintain integrations with platforms such as Venafi, Microsoft Intune, and other enterprise systems to enable automated certificate lifecycle management.
• Support automation of certificate provisioning, renewal, and deployment processes across hybrid environments (on-prem and cloud).
• Collaborate with Security, Infrastructure, and Application teams to implement certificate best practices and resolve PKI-related issues.
• Maintain documentation of PKI architecture, processes, and integration patterns.
• Participate in audits, compliance reviews, and security assessments as a PKI subject matter expert.

Required Qualifications

• 3–5 years of experience working with enterprise PKI environments.
• Strong understanding of HSMs, certificate authorities, certificate chains, CRLs, and OCSP.
• Experience with Venafi Trust Protection Platform, Microsoft Intune, or equivalent certificate automation and management platforms.
• Hands-on experience with certificate lifecycle automation, APIs, and integrations.
• Familiarity with Windows and Linux certificate stores, Active Directory Certificate Services (ADCS), and modern cloud PKI approaches.
• Strong troubleshooting and problem-solving skills in PKI-related areas.
• Excellent communication skills and ability to work cross-functionally with technical and non-technical teams.

Preferred Qualifications

• Experience with scripting or automation (e.g., PowerShell, Python, or Bash) for PKI workflows.
• Exposure to Zero Trust architectures and enterprise identity solutions.
• Knowledge of security compliance standards (e.g., NIST, PCI DSS, ISO 27001).

Desired Characteristics

• Self-starter
• Fast learner and the ability to understand large, complex infrastructures
• Expertise working on a team with motivated cross-functional individuals
• The ability to work with demanding customers
• The ability to work as part of a team and share knowledge
• The ability to work directly with Customers and understand their needs and concerns
• Excellent communication and customer service skills
• Ability to work across platforms and with various support teams
• Ability to want to learn and grow
• Must be a team player

We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That's why we provide an array of options, expert guidance and always-on tools that are personalized to meet the needs of your reality—to help support you physically, financially and emotionally through the big milestones and in your everyday life.

Please visit the benefits summary on our careers site for more details.

Education

Certifications (if applicable)

Relevant Work Experience