PKI Support Engineer at MassMutual

Hyderabad, Telangana, India -

Full Time

Start Date

Immediate

Expiry Date

18 Sep, 26

Salary

0.0

Posted On

20 Jun, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

PKI Operations, Certificate Lifecycle Management, Hardware Security Modules, Active Directory Certificate Services, SAML, OIDC, Windows Administration, Linux Administration, PowerShell, Python, TLS, Identity and Access Management

Industry

IT Services and IT Consulting

Description

Who We Are – MassMutual India Since 1851, MassMutual’s commitment has always been to help people protect their families, support their communities, and help one another. Therefore, we want to inspire people to Live Mutual. We at MassMutual value diversity and inclusion. We’re people helping people A career with us means you will work alongside exceptional people and be empowered to reach your professional and personal goals. Our employees are the foundation of what makes MassMutual a strong, stable, and ethical business. We seek and value unique and varied perspectives and experiences because we believe we are stronger when all voices are heard. We invite you to bring your bright, innovative ideas to MassMutual as we continue to help millions of Americans rely on each other. Together, we’re stronger. Job Description Job Description POSITION SUMMARY The Enterprise Technology Experience organization is seeking a Level 2 PKI Operator within the Identity and Access Management (IAM) team. This role is focused on the day-to-day operation, support, and maintenance of Public Key Infrastructure (PKI) services, ensuring certificate-based security services remain reliable, compliant, and available. The PKI Operator will work in a fast-paced, collaborative environment, supporting existing PKI platforms, handling certificate lifecycle activities, responding to incidents, and executing defined operational procedures under established standards and engineering guidance. BASIC QUALIFICATIONS Perform certificate lifecycle operations, including issuance, renewal, revocation, and expiration monitoring Support and operate enterprise PKI platforms following documented procedures and runbooks Working knowledge of PKI concepts, including certificates, keys, trust chains, and encryption Experience supporting Certificate Authorities (CAs) and certificate-based authentication systems Exposure to Hardware Security Modules (HSMs) and key management activities under guidance Familiarity with Windows and Linux operating systems, including basic system administration tasks Experience supporting Active Directory and directory services in relation to certificate services Assist with IAM services and their integration with PKI (authentication, federation, and access controls) Support certificate-based solutions for web infrastructure and applications Experience supporting federation and certificate usage with technologies such as SAML and OIDC Execute documented operational handoffs and support procedures Participate in incident response, troubleshooting, and escalation for PKI-related issues Assist with audit support, evidence collection, and remediation tracking Ability to follow security policies, cryptographic standards, and compliance requirements Create and maintain operational documentation and knowledge base articles Use ticketing and collaboration tools such as JIRA, Confluence, and other Atlassian tools Strong organizational skills with the ability to manage multiple tasks Clear written and verbal communication skills, including communication with non-technical stakeholders Authorized to work in the United States without sponsorship now or in the future PREFERRED QUALIFICATIONS Associate or Bachelor’s degree in Information Technology, Computer Science, or related field Hands-on experience supporting Active Directory Certificate Services (ADCS) Experience with certificate lifecycle management platforms (e.g., Venafi, CyberArk, or equivalents) Basic scripting or automation exposure using PowerShell or Python Foundational understanding of TLS, encryption, cipher suites, and certificate usage Awareness of NIST, FIPS, and internal security standards Familiarity with CA/B Forum principles and certificate compliance requirements Experience supporting or operating key management systems under established processes Exposure to cloud or third-party platforms such as Amazon, Okta, or CyberArk Understanding of ACME protocol operations for automated certificate management Experience working in enterprise environments with defined change, incident, and problem management CORE RESPONSIBILITIES Operate and support PKI services to meet availability, security, and compliance requirements Follow documented procedures and escalate issues appropriately Monitor certificate health, expirations, and service performance Support operational changes approved by engineering and architecture teams Collaborate with IAM engineers, security teams, and application owners Maintain accurate records and documentation for audits and operational continuity CORE VALUES Focus on the Customer: Provide timely, reliable support and maintain service availability Act with Integrity: Adhere to security policies, compliance requirements, and ethical standards Value People: Work respectfully with diverse teams and contributors Work Collaboratively: Partner with engineering, operations, and security teams to resolve issues Achieve Results: Execute operational responsibilities accurately and efficiently Why Join Us? We’ve been around since 1851. During our history, we’ve learned a few things about making sure our customers our top priority. In order to meet and exceed their expectations, we must have the best people providing the best thinking, products, and services. To accomplish this, we celebrate an inclusive, vibrant, and diverse culture that encourages growth, openness, and opportunities for everyone. A career with MassMutual, Great Place to Work® certified and India's Best Workplaces in BFSI 2023 - Top 50 organization means you will be part of a strong, stable, and ethical business with industry leading pay and benefits. And your voice will always be heard. Does this sound like a great fit? Apply today! At MassMutual, we value both the flexibility that a remote work environment offers and the value that comes from connecting and collaborating in person with our colleagues. Our work environment is one where the majority of our team members adopt a hybrid schedule — working some days in the office and some days remotely, balancing flexibility with in-person collaboration. One where each manager works with their teams to determine a schedule that meets the needs of customers, the team and the business. While the majority of our employees will follow this hybrid model, some of our roles will continue to be 100% on-site and others may be 100% remote, subject to business needs. MassMutual is guided by a single purpose: We help people secure their future and protect the ones they love. As a company, owned by our policyowners, we are defined by mutuality and our vision to put customers first. It’s more than our company structure – it’s our way of life. We are a company of people protecting people. Our company exists because people are willing to share risk and resources, and rely on each other when it counts. At MassMutual, we Live Mutual. If you need an accommodation to complete the application process, please contact us and share the specifics of the assistance you need.

Responsibilities

The role focuses on the day-to-day operation, support, and maintenance of Public Key Infrastructure (PKI) services to ensure reliability and compliance. Key tasks include managing certificate lifecycles, responding to incidents, and collaborating with IAM engineers and security teams.