Senior Public Key Infrastructure (PKI) Engineer

Senior Analyst - Applications Programming

Job Description:

About Us

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits.

We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.

Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Global Business Services

Global Business Services delivers Technology and Operations capabilities to Lines of Business and Staff Support Functions of Bank of America through a centrally managed, globally integrated delivery model and globally resilient operations.

Global Business Services is recognized for flawless execution, sound risk management, operational resiliency, operational excellence and innovation.

In India, we are present in five locations and operate as BA Continuum India Private Limited (BACI), a non-banking subsidiary of Bank of America Corporation and the operating company for India operations of Global Business Services.

Process Overview

Senior PKI Engineer to design, implement, and operate enterprise-grade Public Key Infrastructure (PKI) services with a strong focus on Microsoft Active Directory Certificate Services (AD CS) and Active Directory (AD) integration. Handson implementation and integration knowledge of certificate lifecycle management, CA hierarchy governance, enrollment automation, HSM-backed key protection, CA backup restore, migration and integration with platforms such as Windows Server, Linux, network/security devices, cloud providers, MDM/EPP, and zero-trust tooling. Subject matter expert for cryptographic standards, certificate-based authentication, and PKI security controls across the organization.

Job Description

This job is responsible for developing and delivering complex requirements to accomplish business goals. Key responsibilities of the job include ensuring that software is developed to meet functional, non-functional and compliance requirements, and solutions are well designed with maintainability/ease of integration and testing built-in from the outset. Job expectations include a strong knowledge of development and testing practices common to the industry and design and architectural patterns.

Responsibilities

• Design and build from scratch scalable certificate lifecycle automation solutions (provisioning, renewal, revocation) using Venafi TPP and custom-developed tooling.
• Develop robust, reusable code (PowerShell, C#, or similar) to automate complex certificate workflows, system integrations, and backend processes.
• Architect and implement API-driven automation frameworks leveraging Venafi APIs and enterprise integrations.
• Replace manual or ad hoc processes with fully automated, self-service solutions aligned to engineering best practices.
• Own the end-to-end design, development, and deployment of automation patterns, including error handling, observability, and resiliency.
• Lead the development of standardized automation pipelines and reusable components for enterprise adoption.
• Perform Venafi platform upgrades, patching, and enhancements with a focus on automation, repeatability, and minimal manual intervention.
• Collaborate with DevOps, IAM, Engineering, and Operations teams to embed automation into application onboarding and CI/CD pipelines.
• Troubleshoot and resolve complex issues across Windows Server, RHEL/Unix, and distributed environments.
• Drive technical decisions and champion an automation-first, engineering-led approach across teams.
• Operate independently with a high degree of ownership, proactively identifying opportunities to engineer solutions rather than apply manual fixes.

Requirements

 Education : Bachelor’s degree in Computer Science, Information Security, or a related field

Certifications If Any : NA

Experience Range : 5+ years

 Foundational skills

• 5+ years of experience in PKI engineering and certificate lifecycle management.
• Proficient in the ability to design and build custom automation solutions from scratch, not just modify or maintain existing scripts or tools.
• Strong expertise in software development and scripting (PowerShell, C#, or similar) with a focus on clean, maintainable, production-quality code.
• Deep understanding of encryption technologies (PKI, TLS, symmetric/asymmetric cryptography, certificate authorities).
• Hands-on experience building API integrations and automation frameworks, preferably with Venafi APIs.
• Experience integrating certificate automation into CI/CD pipelines and infrastructure-as-code workflows.
• Strong knowledge of Windows Server, RHEL/Linux, IIS, and networking protocols (TCP/IP, DNS, HTTP, SSH).
• Experience with Venafi TPP, TLS Protect, or similar enterprise certificate management platforms.
• Demonstrated ability to translate complex problems into automated, scalable engineering solutions.
• Strong troubleshooting, debugging, and root-cause analysis skills.
• Excellent communication skills with the ability to articulate technical designs and influence adoption.
• Ability to manage multiple priorities in a fast-paced, evolving environment.
• Self-starter mindset with high curiosity and comfort operating in ambiguity.

 Desired skills

• Experience designing enterprise-scale automation frameworks or platforms (beyond single-use scripts).
• Familiarity with cloud-based PKI and automation in AWS, Azure, or GCP environments.
• Experience with infrastructure-as-code tools (Ansible, Terraform, etc.) and building reusable automation playbooks.
• Experience with containerized environments and modern deployment patterns.
• Exposure to platform engineering, developer enablement, or self-service automation models.
• Certifications in PKI, Venafi, or related security technologies.
• Experience working in Agile and DevOps environmen

Work Timings : 1.30pm to 10.30 pm

Job Location : Hyderabad/Chennai  

Experience Level

Senior Level