PKI Support Engineer

Who We Are – MassMutual India
Since 1851, MassMutual’s commitment has always been to help people protect their families, support their communities, and help one another. Therefore, we want to inspire people to Live Mutual. We at MassMutual value diversity and inclusion. We’re people helping people
A career with us means you will work alongside exceptional people and be empowered to reach your professional and personal goals.  Our employees are the foundation of what makes MassMutual a strong, stable, and ethical business.  We seek and value unique and varied perspectives and experiences because we believe we are stronger when all voices are heard. We invite you to bring your bright, innovative ideas to MassMutual as we continue to help millions of Americans rely on each other.
Together, we’re stronger.

Job Description

Job Description

POSITION SUMMARY

The Enterprise Technology Experience organization is seeking a Level 2 PKI Operator within the Identity and Access Management (IAM) team. This role is focused on the day-to-day operation, support, and maintenance of Public Key Infrastructure (PKI) services, ensuring certificate-based security services remain reliable, compliant, and available.

The PKI Operator will work in a fast-paced, collaborative environment, supporting existing PKI platforms, handling certificate lifecycle activities, responding to incidents, and executing defined operational procedures under established standards and engineering guidance.

BASIC QUALIFICATIONS

• Perform certificate lifecycle operations, including issuance, renewal, revocation, and expiration monitoring
• Support and operate enterprise PKI platforms following documented procedures and runbooks
• Working knowledge of PKI concepts, including certificates, keys, trust chains, and encryption
• Experience supporting Certificate Authorities (CAs) and certificate-based authentication systems
• Exposure to Hardware Security Modules (HSMs) and key management activities under guidance
• Familiarity with Windows and Linux operating systems, including basic system administration tasks
• Experience supporting Active Directory and directory services in relation to certificate services
• Assist with IAM services and their integration with PKI (authentication, federation, and access controls)
• Support certificate-based solutions for web infrastructure and applications
• Experience supporting federation and certificate usage with technologies such as SAML and OIDC
• Execute documented operational handoffs and support procedures
• Participate in incident response, troubleshooting, and escalation for PKI-related issues
• Assist with audit support, evidence collection, and remediation tracking
• Ability to follow security policies, cryptographic standards, and compliance requirements
• Create and maintain operational documentation and knowledge base articles
• Use ticketing and collaboration tools such as JIRA, Confluence, and other Atlassian tools
• Strong organizational skills with the ability to manage multiple tasks
• Clear written and verbal communication skills, including communication with non-technical stakeholders
• Authorized to work in the United States without sponsorship now or in the future

PREFERRED QUALIFICATIONS

• Associate or Bachelor’s degree in Information Technology, Computer Science, or related field
• Hands-on experience supporting Active Directory Certificate Services (ADCS)
• Experience with certificate lifecycle management platforms (e.g., Venafi, CyberArk, or equivalents)
• Basic scripting or automation exposure using PowerShell or Python
• Foundational understanding of TLS, encryption, cipher suites, and certificate usage
• Awareness of NIST, FIPS, and internal security standards
• Familiarity with CA/B Forum principles and certificate compliance requirements
• Experience supporting or operating key management systems under established processes
• Exposure to cloud or third-party platforms such as Amazon, Okta, or CyberArk
• Understanding of ACME protocol operations for automated certificate management
• Experience working in enterprise environments with defined change, incident, and problem management

CORE RESPONSIBILITIES

• Operate and support PKI services to meet availability, security, and compliance requirements
• Follow documented procedures and escalate issues appropriately
• Monitor certificate health, expirations, and service performance
• Support operational changes approved by engineering and architecture teams
• Collaborate with IAM engineers, security teams, and application owners
• Maintain accurate records and documentation for audits and operational continuity

CORE VALUES

• Focus on the Customer: Provide timely, reliable support and maintain service availability
• Act with Integrity: Adhere to security policies, compliance requirements, and ethical standards
• Value People: Work respectfully with diverse teams and contributors
• Work Collaboratively: Partner with engineering, operations, and security teams to resolve issues
• Achieve Results: Execute operational responsibilities accurately and efficiently

Why Join Us?
We’ve been around since 1851. During our history, we’ve learned a few things about making sure our customers our top priority. In order to meet and exceed their expectations, we must have the best people providing the best thinking, products, and services. To accomplish this, we celebrate an inclusive, vibrant, and diverse culture that encourages growth, openness, and opportunities for everyone. A career with MassMutual, Great Place to Work® certified and India's Best Workplaces in BFSI 2023 - Top 50 organization means you will be part of a strong, stable, and ethical business with industry leading pay and benefits. And your voice will always be heard.
Does this sound like a great fit? Apply today!