Senior Administrator - Thycotic Privilege Manager, Azure Active Directory

Job Description

Senior Administrator - Thycotic Privilege Manager, Azure Active Directory

| Pune, MaharashtraBengaluru, Karnataka

Job Summary

Years of Experience

• 3-6 years of experience in Public Key Infrastructure (PKI), Certificate Management, Cybersecurity, IAM, PAM, or Infrastructure Security.

General Description

• Provide day-to-day administration, monitoring, and operational support for enterprise PKI and Venafi certificate management solutions, ensuring secure management of digital certificates and cryptographic assets.
• Support certificate lifecycle management activities including discovery, issuance, renewal, revocation, replacement, and compliance reporting across enterprise environments.
• Collaborate with infrastructure, security, application, network, and cloud teams to support PKI integrations, certificate onboarding, troubleshooting, and process improvements.
• Perform incident resolution, root cause analysis, documentation, and operational support activities to maintain the security, availability, and compliance of PKI services.

Key Responsibilities

Years of Experience

• 3-6 years of experience in Public Key Infrastructure (PKI), Certificate Management, Cybersecurity, IAM, PAM, or Infrastructure Security.

General Description

• Provide day-to-day administration, monitoring, and operational support for enterprise PKI and Venafi certificate management solutions, ensuring secure management of digital certificates and cryptographic assets.
• Support certificate lifecycle management activities including discovery, issuance, renewal, revocation, replacement, and compliance reporting across enterprise environments.
• Collaborate with infrastructure, security, application, network, and cloud teams to support PKI integrations, certificate onboarding, troubleshooting, and process improvements.
• Perform incident resolution, root cause analysis, documentation, and operational support activities to maintain the security, availability, and compliance of PKI services.

Skill Requirements

Technical Requirements

• Hands-on experience with Venafi Trust Protection Platform (TPP) and/or Venafi TLS Protect, including certificate discovery, lifecycle management, and operational support.

• Strong understanding of PKI concepts including:

• Digital Certificates

• Certificate Authorities (CA)

• Registration Authorities (RA)

• Certificate Signing Requests (CSR)

• Key Generation

• Certificate Revocation Lists (CRL)

• Online Certificate Status Protocol (OCSP)

• Experience managing the complete certificate lifecycle, including certificate issuance, renewal, revocation, replacement, and expiration management.

• Experience onboarding applications, servers, load balancers, network devices, and cloud services into Venafi-managed certificate ecosystems.

• Knowledge of cryptographic standards and algorithms including RSA, ECC, SHA-2, PKCS, TLS/SSL, and X.509 certificates.

• Experience supporting enterprise Certificate Authorities such as:

• Microsoft ADCS

• DigiCert

• Entrust

• Sectigo

• GlobalSign

• Other public and private CAs

• Experience managing and troubleshooting SSL/TLS certificates across:

• Windows Servers

• Linux/Unix Servers

• Web Servers (IIS, Apache, NGINX)

• Application Servers

• Network Devices

• Familiarity with certificate deployment and automation using: PowerShell, Python, Shell Scripting, REST APIs.

• Experience integrating Venafi with enterprise platforms such as: Active Directory, LDAP, SIEM Solutions, ITSM Platforms, Cloud Platforms, DevOps Toolchains

Working knowledge of cloud environments including AWS, Azure, and GCP, with understanding of cloud-native certificate and key management services.

Experience supporting certificate management for containers and modern platforms such as Docker, Kubernetes, OpenShift, and CI/CD pipelines.

Understanding of Hardware Security Modules (HSMs), key protection mechanisms, and certificate security best practices.

• Knowledge of security and compliance requirements including NIST, ISO 27001, PCI-DSS, SOX, HIPAA, and GDPR.
• Ability to monitor certificate health, identify expiring certificates, perform risk assessments, and support remediation activities.
• Strong troubleshooting, analytical, and problem-solving skills with the ability to provide L2 operational support and incident resolution for PKI environments.

Soft Skills

• Good communication for cross-functional collaboration and readiness to participate in on-call rotation.
• Ability to present solutions to clients remotely and in person if needed.
• Good documentation skills that will enable creation of design documents for the technical solutions proposed.

Certifications (Good to Have)

• Venafi Security Administrator (VSA20)

Educational Qualifications

• University degree in IT or/and IT Security

Other Requirements

Apply now

Information at a Glance

Why HCLTech?

At HCLTech, youll supercharge your potential. Youll find your career. And youll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion.