Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Data Encryption
Good to have skills : NA
Minimum 3 year(s) of experience is required
Educational Qualification : 15 years full time education
Summary: The PKI Consultant will be responsible for designing, implementing, administering, and optimizing enterprise Public Key Infrastructure services using EBCA, Venafi Trust Protection Platform, and Microsoft Active Directory Certificate Services (ADCS). This role ensures the security, reliability, and lifecycle management of certificates across enterprise environments, supporting applications, endpoints, servers, network devices, and cloud services. Roles & Responsibilities: - Design and implement enterprise PKI architecture using Microsoft ADCS, EBCA, and Venafi TPP. - Deploy and maintain Root CA, Subordinate CA, Policy CA, and Issuing CA structures. - Configure certificate templates, enrollment policies, CRLs, OCSP responders, and CA security hardening. - Ensure high availability and disaster recovery for PKI infrastructure. - Implement automated certificate issuance, renewal, and revocation via Venafi or EBCA platforms. - Manage server, client, device, and application certificates across on-prem and cloud. - Oversee certificate lifecycle policies, expiration monitoring, alerts, and compliance reporting. - Prevent certificate outages by proactively monitoring expiring certificates. - Manage PKI servers, CA hierarchy, CRL distribution, OCSP, and certificate repositories. - Maintain key archival, recovery procedures, and secure private key handling. - Support code signing, SSL/TLS, device certificates, S/MIME, authentication certificates, etc. - Monitor PKI performance, logs, and operational metrics. - Integrate PKI with AD/LDAP, devices, network appliances, VPN, Load Balancers, Mobile device management. - Integrate Venafi with tools (F5, Palo Alto, NGINX, AWS ACM, Azure Key Vault, Kubernetes). - Automate certificate provisioning using Venafi, REST APIs, PowerShell, Python, Ansible. - Enable certificate management across hybrid and multi-cloud environments. - Enforce certificate standards, cryptographic policies (RSA/ECC), hashing algorithms, and key lengths. - Ensure compliance with security frameworks: NIST, PCI-DSS, ISO 27001, SOC2, internal cyber policies. - Implement hardening for PKI servers, HSM integration, key protection mechanisms. - Conduct periodic audits and remediation of misconfigured or risky certificates. - Troubleshoot certificate-related outages affecting applications, servers, load balancers, and endpoints. - Participate in incident response for compromised certificates, key misuse, or PKI failures. - Conduct root-cause analysis (RCA) for PKI disruptions or expired certificates. - Maintain PKI architecture documents, SOPs, RACI, runbooks, diagrams, and certificate usage inventories. - Provide training and guidance to operations, application, and infrastructure teams. - Support global stakeholders in certificate onboarding and usage. Professional & Technical Skills: - Must To Have Skills: Proficiency in Data Encryption. - Strong understanding of cloud security principles and practices. - Experience with EBCA (Entrust/Baltimore/European CA platform), Venafi Trust Protection Platform (TPP / TLS Protect / CodeSign Protect), Microsoft ADCS Enterprise PKI - Familiarity with risk assessment methodologies and tools. - Knowledge of compliance requirements related to data protection and privacy. - Root & subordinate CA management - CRL, delta CRL, AIA, OCSP - SSL/TLS, mTLS, client-auth certificates - Certificate chain validation & trust stores - Code signing, device certificates, authentication certs - Private key protection (HSM, Azure Key Vault, AWS KMS) - PKI in cloud (Azure, AWS, GCP) - PowerShell scripting (mandatory) - REST API, JSON for Venafi and EBCA integrations - Automation tools (Ansible, Jenkins, Terraform advantageous) - Network security Load balancers, proxies, firewalls handling certs - Excellent troubleshooting and analytical skills. - Strong communication and documentation capability. - Ability to work with global engineering, cloud, and security teams. Additional Information: - The candidate should have minimum 6+ years total experience, 3+ of dedicated PKI experience (EBCA / Venafi / Microsoft PKI) - This position is based at our Bengaluru office. - A 15 years full time education is required. Venafi Administrator / TPP Certification. - Microsoft MCP/MCSA in Windows Server or Active Directory. - PKI security training (SANS SEC509, EC-Council, ISC2 CCSP/CISSP advantage). - Experience with HSMs (Thales, Safenet, Azure Key Vault HSM).
Bengaluru
Equal Employment Opportunity Statement
All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law.
Please read Accenture’s Recruiting and Hiring Statement for more information on how we process your data during the Recruiting and Hiring process.
We work with one shared purpose: to deliver on the promise of technology and human ingenuity. Every day, more than 775,000 of us help our stakeholders continuously reinvent. Together, we drive positive change and deliver value to our clients, partners, shareholders, communities, and each other.
We believe that delivering value requires innovation, and innovation thrives in an inclusive and diverse environment. We actively foster a workplace free from bias, where everyone feels a sense of belonging and is respected and empowered to do their best work.
At Accenture, we see well-being holistically, supporting our people’s physical, mental, and financial health. We also provide opportunities to keep skills relevant through certifications, learning, and diverse work experiences. We’re proud to be consistently recognized as one of the World’s Best Workplaces™.
Join Accenture to work at the heart of change. Visit us at www.accenture.com.
We have been alerted to the existence of fraudulent messages asking job seekers to set up payment to cover various costs associated with establishing employment at Accenture. No one is ever required to pay for employment at Accenture. If you are contacted by someone asking for payment, please do not respond, and contact us at india.fc.check@accenture.com immediately.