Consultant

Job Description

Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you'd like, where you'll be supported and inspired by a collaborative community of colleagues around the world, and where you'll be able to reimagine what's possible. Join us and help the world's leading organizations unlock the value of technology and build a more sustainable, more inclusive world.

Your Role

We are looking for a highly skilledPKI Administratorto join ourCertificate Managementteam with4 to 6 years of experience for Mumbai/Pune location. The ideal candidate will be responsible for managing thecertificate lifecycle, including issuance, renewal, and revocation, and supporting enterprisePKI infrastructure. This role involves working withMicrosoft Certificate Services, troubleshooting certificate and CRL-related issues, and ensuring compliance with cryptographic standards and governance policies.

- Manage the complete Certificate Life Cycle: issuance, renewal, and revocation.
- Issue certificates for internal and external service applications using internal or public Certificate Authorities (CAs).
- Coordinate with stakeholders to ensure timely renewal of certificates before expiry.
- Provide guidance for CSR (Certificate Signing Request) creation.
- Assist in certificate installation on Microsoft servers (IIS, certificate binding, etc.).
- Monitor and maintain Active Directory Certificate Services (ADCS) servers.
- Perform regular health checks on CA servers and monitor CRL (Certificate Revocation List) publishing schedules.
- Handle annual renewal of Root CA and Issuing CA certificates, and publish Root CA CRLs.
- Troubleshoot certificate-related issues such as trust errors, validity, incorrect purpose, hashing algorithms, and enrollment problems.
- Resolve CRL-related issues, including publishing and verification checks.
- Identify certificate needs for applications and recommend appropriate certificate types (e.g., Wildcard, Multi-domain).
- Manage certificate templates, including addition, deletion, modification, and permission settings.

Your Profile

- Strong knowledge of PKI and cryptography standards (PKCS, X.509, PKIX, ETSI).
- Hands-on experience with Microsoft Certificate Services and related components.
- Familiarity withcertificate-enabled applications (SSL/TLS, S/MIME, 802.1X, Code Signing, etc.) and cryptographic concepts (symmetric/asymmetric encryption, digital signatures).
- Understanding ofHSMs, SSL offloading, and key/EFS recovery processes.
- Working knowledge ofActive Directory integration with Microsoft PKI.

What you'll love about working here

- You can shape yourwith us. We offer a range of career paths and internal opportunities within Capgemini group. You will also get personalized career guidance from our leaders.
- You will get comprehensive wellness benefits including health checks, telemedicine, insurance with top-ups, elder care, partner coverage or new parent support via flexible work.
- At Capgemini, you can work onin tech and engineering with industry leaders or createto overcome societal and environmental challenges.

Capgemini is a global business and technology transformation partner, helping organizations to accelerate their dual transition to a digital and sustainable world, while creating tangible impact for enterprises and society. It is a responsible and diverse group of 340,000 team members in more than 50 countries. With its strong over 55-year heritage, Capgemini is trusted by its clients to unlock the value of technology to address the entire breadth of their business needs. It delivers end-to-end services and solutions leveraging strengths from strategy and design to engineering, all fueled by its market leading capabilities in AI, generative AI, cloud and data, combined with its deep industry expertise and partner ecosystem.

---