Job Description

:
Role: Manager - Cybersecurity - Certificate Management Operations
About the Company:
Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency, enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won't just imagine the future-you'll create it.
About the Job:
We are seeking an experienced Cybersecurity Manager in Digital Certificate Management Operations to join our Cybersecurity team. The individual in this role will be responsible for leading and managing a team of 10+ experienced cybersecurity professionals in AT&T India. The Manager in this role leads, manages and works with team members on Digital Certificate Management operations
The ideal candidate will have deep functional and operational expertise in the Public Key Infrastructure (PKI), cryptography, and certificate lifecycle management to ensure the secure issuance, renewal, revocation, and overall management of digital certificates across the enterprise.
This role will collaborate with developers, network engineers, and security teams to maintain a robust and compliant certificate ecosystem that supports secure communications and data protection. This role will have hands-on experience with relevant tools and compliance frameworks.
Experience Level: 10+ years.
Location: Hyderabad / Bengaluru
Responsibilities Include:

• Functionally lead and manage a team of 10+ experienced professionals in AT&T India
• Manage PKI-related operations, mentor team members, and facilitate cross-team collaboration with security, DevOps, and infrastructure groups.
• Manage certificate lifecycle operations including issuance, renewal, revocation, and cross-certification within complex CA hierarchies.
• Enforce cryptographic key management policies including key generation, escrow, rotation, and destruction
• Monitor certificate status and proactively address expirations to prevent service disruptions.
• Troubleshoot and resolve certificate-related issues across multiple platforms and applications.
• Automate certificate management processes using scripting languages and certificate management tools.
• Maintain accurate documentation of certificate inventories, configurations, and operational procedures.
• Collaborate closely with developers, security teams, network administrators, and other stakeholders to ensure secure and compliant certificate deployments.
• Ensure compliance with PKI best practices, industry standards, and regulatory requirements.
• Establish monitoring and alerting mechanisms for certificate expiration and operational health.
• Participate in periodic reviews / checks and respond to certificate management-related queries.
• Stay current with emerging trends, threats, and technologies in digital certificate management.
• Lead incident response efforts related to certificate compromise or misuse.
• Produce comprehensive documentation and communicate complex technical concepts clearly to diverse stakeholders.
• Provide training and support to internal teams on certificate best practices.
• Attention to detail and sense of urgency is crucial
• Collaborate with leadership teams, provide subject matter expertise and insights.
• Support and guide team members in providing high-quality services / deliverables.
• Support, guide and mentor team members in technical and functional matters
• Should be flexible to provide coverage in US morning hours
• Should be flexible with shifts and supporting on weekends

Required skills:

• Overall - At least 10+ years of experience in performing Digital Certificate Management Operations including:

Core PKI & Security Skills

• Advanced understanding of X.509 certificates, CRLs, OCSP, and complex CA hierarchies (root, intermediate, issuing).
• Expertise in certificate lifecycle management at scale, cross-certification, and trust model architectures.
• Strong cryptographic knowledge including symmetric/asymmetric encryption, digital signatures, and hashing algorithms.
• Proven experience with key management policies covering generation, escrow, rotation, and secure destruction.
• Demonstrated ability to lead complex PKI operations and guide junior team members.
• Excellent collaboration skills working with security, DevOps, infrastructure, and application teams.
• Operationalize secure PKI systems integrated with IAM, SSO, MFA, and compliant with standards such as NIST, FIPS 140-2, and ISO 27001.
• In-depth knowledge of networking protocols relevant to certificate distribution and validation: SSH, TLS/SSL, HTTPS, S/MIME, IPsec, VPNs, DNS, LDAP, HTTP.
• Proven experience leveraging automation for certificate lifecycle management using scripting tools like PowerShell and Python

Tools & Technologies:

• Hands-on experience with OpenSSL, Keytool, Certutil.
• Familiarity with Microsoft AD CS, KeyFactor, Venafi, HashiCorp Vault, and EJBCA.
• Experience managing Hardware Security Modules (HSMs) such as Thales and SafeNet.
• ACME protocol for automated certificate lifecycle management

Monitoring, Logging and Compliance:

• Lead and Operationalize certificate expiration monitoring and alerting systems to prevent outages.
• Maintain thorough logging and auditing of all certificate operations for security and compliance purposes.
• Proven ability to troubleshoot complex certificate-related issues across diverse platforms.
• Strong documentation skills to support audit readiness and operational transparency.

Automation

• Python with libraries like cryptography, pyOpenSSL, requests, subprocess for PKI automation and API integration.
• PowerShell for Windows PKI environments (e.g., AD CS).
• Bash scripting for Linux-based PKI tools and OpenSSL automation.
• Java for working with PKI tools such as EJBCA and integrations like HashiCorp Vault.
• Other automation tools: Ansible, Terraform, and CI/CD systems (GitHub Actions, Jenkins).
• RESTful API integrations for DigiCert, HashiCorp Vault, and ACME protocol platforms.

Desirable skills:

• Bachelor's or master's degree in computer science, mathematics, information systems, engineering, or cybersecurity.
• Industry certifications such as CEH, CISSP, SANS and/or other relevant certifications
• Ability to prioritize individual/group work in a high-stress and time-bound environment
• Excellent communication, problem-solving, and analytical skills.
• Ability to work independently and as part of a team.

Additional information (if any):

• Should be flexible to provide coverage in US morning hours
• Should be flexible with shifts and supporting on weekends

Weekly Hours: 40
Time Type: Regular
Location: IND:AP:Hyderabad / Argus Bldg 4f & 5f, Sattva, Knowledge City- Adm: Argus Building, Sattva, Knowledge City
It is the policy of AT&T to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, AT&T will provide reasonable accommodations for qualified individuals with disabilities. AT&T is a fair chance employer and does not initiate a background check until an offer is made.

Skills Required