Posted 25 August, 2026
Cyber IAM Managed Service - PKI HSM Assistant Manager
KPMG
Pune,Maharashtra,IN,411014
Full Time
Reference: 218_549848_30049210
We are seeking a highly skilled and motivated Assistant Manager - PKI & HSM to lead the administration, maintenance, and optimization of the organization's Public Key Infrastructure (PKI) and Hardware Security Module (HSM) ecosystem. The role will be responsible for certificate lifecycle management, key management, HSM operations (on-premises and cloud), and integration of PKI services across Identity and Access Management (IAM) platforms. The ideal candidate will possess strong technical expertise in cryptography, PKI operations, certificate management, automation, and stakeholder engagement.
The ideal candidate will:
HSM Administration & Key Management
Minimum 6+ years of hands-on experience administering Thales Luna Network HSMs, including partition management, client registration, HA configuration, backup/restore, firmware upgrades, and integration with Microsoft PKI environments.
Administer and maintain Hardware Security Modules (HSMs) across on-premises and cloud environments.
Manage cryptographic keys, hardware-backed certificate generation, key ceremonies, backup, recovery, and rotation activities.
Ensure secure deployment and configuration of hardware-based keys supporting privileged access and critical enterprise applications.
Monitor HSM health, capacity, availability, and security compliance.
PKI & Certificate Lifecycle Management
Manage end-to-end certificate lifecycle processes including onboarding, issuance, renewal, rekeying, revocation, and decommissioning of digital certificates.
Provision and manage PKI certificates for servers, applications, devices, and services requiring secure authentication and encryption.
Administer and support Certificate Lifecycle Management (CLM) platforms to ensure compliance and operational efficiency.
Renew and maintain Root Certificate Authority (CA) and Issuing CA certificates while ensuring minimal business impact.
Operational Support & Compliance
Provide L2/L3 operational support for PKI and HSM infrastructure, ensuring high availability and service reliability.
Support application teams with secure certificate deployment, installation, troubleshooting, and remediation activities.
Partner with vulnerability and network scanning teams to conduct periodic discovery scans and identify unmanaged certificates, keys, and cryptographic assets.
Investigate certificate-related incidents, outages, and security events, ensuring timely resolution and root cause analysis.
Maintain compliance with enterprise security standards, cryptographic policies, and regulatory requirements.
Certification Required:
Thales Luna HSM Administrator Certification (Mandatory)
Microsoft PKI / Active Directory Certificate Services (ADCS) certification (Preferred)
CISSP, CCSP, or other Information Security certifications (Preferred)
ITIL Foundation certification. (Preferred)
Behavioral / team skills
Excellent communication (written and verbal) and interpersonal skills
Ready to work in Shifts (on 3 shift rotation pattern)
Flexibility to adapt to a variety of engagement types, working hours and work environments and locations
Proven ability to work creatively and analytically in a problem-solving environment
Desire to learn and contribute
Focused and self-motivated approach to work
Personal drive and positive work ethic to deliver results within tight deadlines and in demanding situations
