Job Description

Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you'd like, where you'll be supported and inspired by a collaborative community of colleagues around the world, and where you'll be able to reimagine what's possible. Join us and help the world's leading organizations unlock the value of technology and build a more sustainable, more inclusive world.

Your Role

-------------

We are looking for a highly skilled

PKI Administrator

to join our

Certificate Management

team with

4 to 6 years of experience for Mumbai/Pune location

. The ideal candidate will be responsible for managing the

certificate lifecycle

, including issuance, renewal, and revocation, and supporting enterprise

PKI infrastructure

. This role involves working with

Microsoft Certificate Services

, troubleshooting certificate and CRL-related issues, and ensuring compliance with cryptographic standards and governance policies.

Manage the complete

Certificate Life Cycle

: issuance, renewal, and revocation.

Issue certificates for

internal and external service applications

using internal or public Certificate Authorities (CAs).

Coordinate with stakeholders

to ensure timely renewal of certificates before expiry.

Provide

guidance for CSR (Certificate Signing Request) creation

.

Assist in

certificate installation

on Microsoft servers (IIS, certificate binding, etc.).

Monitor and maintain

Active Directory Certificate Services (ADCS)

servers.

Perform

regular health checks

on CA servers and monitor CRL (Certificate Revocation List) publishing schedules.

Handle

annual renewal

of Root CA and Issuing CA certificates, and publish Root CA CRLs.

Troubleshoot certificate-related issues such as

trust errors, validity, incorrect purpose, hashing algorithms, and enrollment problems

.

Resolve

CRL-related issues

, including publishing and verification checks.

Identify certificate needs for applications and

recommend appropriate certificate types

(e.g., Wildcard, Multi-domain).

Manage

certificate templates

, including addition, deletion, modification, and permission settings.

Your Profile

----------------

Strong knowledge of

PKI and cryptography standards

(PKCS, X.509, PKIX, ETSI).

Hands-on experience with

Microsoft Certificate Services

and related components.

Familiarity with

certificate-enabled applications

(SSL/TLS, S/MIME, 802.1X, Code Signing, etc.) and cryptographic concepts (symmetric/asymmetric encryption, digital signatures).

Understanding of

HSMs, SSL offloading

, and

key/EFS recovery processes

.

Working knowledge of

Active Directory integration

with Microsoft PKI.

What you'll love about working here

---------------------------------------

You can shape your

career

with us. We offer a range of career paths and internal opportunities within Capgemini group. You will also get personalized career guidance from our leaders.

You will get comprehensive wellness benefits including health checks, telemedicine, insurance with top-ups, elder care, partner coverage or new parent support via flexible work.

At Capgemini, you can work on

cutting-edge projects

in tech and engineering with industry leaders or create

solutions

to overcome societal and environmental challenges.

Capgemini is a global business and technology transformation partner, helping organizations to accelerate their dual transition to a digital and sustainable world, while creating tangible impact for enterprises and society. It is a responsible and diverse group of 340,000 team members in more than 50 countries. With its strong over 55-year heritage, Capgemini is trusted by its clients to unlock the value of technology to address the entire breadth of their business needs. It delivers end-to-end services and solutions leveraging strengths from strategy and design to engineering, all fueled by its market leading capabilities in AI, generative AI, cloud and data, combined with its deep industry expertise and partner ecosystem.