Microsoft Cryptography/PKI Architect or Consultant

Location: Noida Preferred. But open for other location.
Experience: 9 – 14 Years
We are looking for a highly skilled Cyber Security Architect / Consultant with deep expertise in Public Key Infrastructure (PKI), Certificate Lifecycle Management (CLM), cryptographic technologies, Post-Quantum Cryptography (PQC), and crypto agility. The role involves designing, implementing, and modernizing enterprise cryptographic environments while ensuring scalability, compliance, and future readiness against quantum threats.
Key Responsibilities:
Architecture & Strategy
Design and implement enterprise PKI and CLM solutions (on-premises, cloud, and hybrid).
Define and drive cryptographic architecture, standards, and governance.
Develop crypto agility roadmap and support transition to quantum-safe cryptography.
Perform current-state assessment, gap analysis, and target-state architecture for cryptographic environments.
Provide consulting and advisory to application, cloud, network, and infrastructure teams on secure cryptographic integration.
Implementation & Operations
Lead deployment and migration of PKI hierarchies, HSM integration, key management, and certificate automation.
Implement certificate discovery, inventory, and lifecycle automation.
Support secure key management practices across multi-cloud and on-prem platforms.
Integrate PKI with IAM, DevOps, containers, service mesh, and Zero Trust architectures.
Post-Quantum Readiness
Assess quantum risk exposure across enterprise systems.
Evaluate and recommend PQC algorithms and hybrid cryptographic models.
Define and execute quantum-safe migration strategy.
Risk, Compliance & Governance
Ensure compliance with NIST, ETSI, ISO 27001, PCI-DSS, and regulatory requirements.
Conduct cryptographic risk assessments and threat modeling.
Define policies, standards, and best practices for enterprise cryptography.
Stakeholder & Consulting
Act as SME for cryptography and PKI in client engagements.
Prepare and deliver technical presentations, architecture documents, and executive briefings.
Collaborate with cross-functional teams and provide technical leadership.
Required Technical Skills
Strong hands-on experience in PKI design, implementation, and migration.
Expertise in Certificate Lifecycle Management (CLM) platforms.
Deep understanding of:
X.509 certificates, CRL, OCSP
Key management and HSMs
TLS/SSL, mTLS, code signing, document signing
SSH key management
Knowledge of crypto discovery and automation tools.
Strong understanding of Post-Quantum Cryptography (PQC) and crypto agility frameworks.
Experience in cloud PKI and key management (AWS, Azure, GCP).
Scripting/automation using PowerShell, Python, Bash, or APIs.
Consulting & Communication Skills
Excellent client-facing and stakeholder management skills.
Ability to translate business requirements into secure cryptographic architectures.
Strong documentation, presentation, and solution design capabilities.
Preferred Qualifications
Experience with Zero Trust and machine identity management.
Knowledge of DevSecOps and certificate automation in CI/CD pipelines.
Familiarity with quantum risk assessment methodologies.
Relevant certifications (one or more):
CISSP / CCSP
CISM
TOGAF
Vendor PKI certifications
Bachelor’s degree in computer science, Information Technology, or a related field.
Proven experience as a PKI Architect or Consultant with a focus on strategic design.
In-depth knowledge of cryptographic algorithms, digital certificates, and security protocols.
Experience in conducting PKI assessments and providing actionable recommendations.
Strong analytical and problem-solving skills.
Excellent communication and client-facing skills.
Ability to work independently and collaboratively with client teams.

Work arrangement
No