Certificate Lifecycle Management (CLM) Consultant - Identity and Access Management

GD IAM Consultant - Consultant - PN 6375

The Role:

The primary responsibility of a Certificate Lifecycle Management (CLM) team consultant is to ensure the security, integrity, and uninterrupted availability of an organization's digital certificates (SSL/TLS) throughout their entire lifecycle—from discovery to revocation.

The Team / The Business: Candidate will be joining a team of highly motivated and professional individuals. The CLM team is responsible for overseeing the entire lifespan of digital certificates—including issuance, deployment, monitoring, renewal, and revocation—to ensure secure communication and prevent outages. Their primary role is to maintain a complete inventory, automate renewals to avoid expiration-related downtime, and ensure compliance with security standards.

 

The right candidate:
The ideal candidate will be a motivated CLM team consultant, who is willing to provide a range of SSL Certificate lifecycle Mgmt services to our clients across industry verticals. The role requires a combination of the right skills and experience to address the unique needs of businesses in a variety of industries. 

 

What’s in it for you:

We are hiring for experienced CLM/PKI consultants for our IAM practice in Bangalore. Candidates with experience in any of one these tool – Venafi TPP, DigiCert and PKI Architecture can apply. Having a certification will be an added advantage. 

Responsibilities:

• CLM Tool Administration: Configure and maintain the Venafi Trust Protection Platform and DigiCert CertCentral/One platforms for enterprise-wide certificate inventory, discovery, and management.

• Automation & Orchestration: Engineer and drive automation of certificate issuance, renewal, and revocation workflows (using ACME, SCEP, Venafi API) to reduce manual operational tasks.

• PKI Operations: Manage internal Microsoft CA (ADCS) and external CA (DigiCert) integrations. Oversee the generation, distribution, and revocation of digital certificates for servers, applications, and network devices.

• Integration: Integrate CLM platforms with infrastructure components, including cloud providers (Azure, AWS), load balancers (F5), web servers (IIS, Apache), and DevOps pipelines.

• Governance & Compliance: Define and enforce certificate policies (CP/CPS), ensuring adherence to security standards like RSA/ECC, SHA-2, and TLS 1.2/1.3.

• Troubleshooting & Support: Act as the subject matter expert (SME) for troubleshooting complex certificate-related incidents, chain validation issues, and TLS handshake failures.

• Mentorship: Provide technical guidance and mentorship to junior team members on PKI best practices

• Reporting: Preparing Certificate Lifecycle Monthly Reports.

 

What We are Looking For:

• Have 4 - 6 years’ experience as a functional consultant
• Any bachelor’s degree (B.Tech/B.E/B.Sc or equivalent)
• Moderate/Intermediate knowledge on Venafi, Digicert and its features
• Moderate/Intermediate knowledge of PKI Architecture
• Moderate/Intermediate knowledge on ServiceNow Ticket Management (ITIL framework)
• Good to have knowledge of Active Directory and CyberArk
• Good to have knowledge on JIRA tool
• Ambitious, pro-active, analytic, customer centric approach
• Familiar with an Agile way of working (or willing to learn)
• Excellent Verbal and Written Communication 

Experience Level

Senior Level