Security Architect

Project Role : Security Architect Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations. Must have skills : Data Encryption Good to have skills : NA Minimum 5 year(s) of experience is required Educational Qualification : 15 years full time education Summary: The L9 Security Team Lead will be responsible for the day-to-day operation, governance, and support of the Public Key Infrastructure (PKI), Venafi Certificate Lifecycle Management, and Thales Cipher Trust platforms. The role will ensure secure certificate lifecycle management, encryption key management, operational stability, SLA compliance, and continuous service improvement while acting as the primary technical escalation point for the Certificate Management team. Roles & Responsibilities: - Manage and support Microsoft PKI infrastructure, including Root CA, Intermediate CA, and Issuing CA components. - Perform certificate issuance, renewal, replacement, revocation, and retirement activities. - Monitor CA health, CRL publication, OCSP services, and certificate validity. - Support disaster recovery testing, backup, restoration, and PKI maintenance activities. - Execute certificate troubleshooting and root cause analysis for certificate-related incidents. - Manage end-to-end certificate lifecycle through Venafi. - Coordinate certificate renewals with application, infrastructure, and network teams. - Troubleshoot certificate enrollment, CSR, SAN, DNS, and validation issues. - Manage certificate expiration monitoring and proactive notifications. - Support Venafi upgrades, integrations, reporting, and automation initiatives. - Maintain certificate inventory and ensure compliance with organizational standards. - Act as L3/L4 escalation point for complex PKI, Venafi, and CipherTrust issues. - Monitor incidents, service requests, changes, and problem records within SLA. - Conduct ticket reviews, backlog management, and operational reporting. - Prepare and present Weekly Service Reviews (WSR) and Monthly Service Reviews (MSR). - Maintain runbooks, SOPs, KT documents, and operational procedures. - Drive automation, process improvements, and service optimization initiatives. Professional & Technical Skills: - Microsoft PKI (ADCS, CA, CRL, OCSP, NDES) - Venafi Trust Protection Platform / TLS Protect - Thales CipherTrust Manager - HSM concepts and key management - SSL/TLS certificates and cryptography - Windows Server Administration - Active Directory & Entra ID fundamentals - ServiceNow Incident, Change, and Request Management - PowerShell scripting and automation Additional Information: - The candidate should have minimum 6-10 years in Cybersecurity/IAM/PKI operations. - Hands-on experience in enterprise PKI administration. - Hands-on experience with Venafi certificate lifecycle management. - Experience with encryption and key management platforms such as Cipher Trust. - Client-facing operational support and service management experience. - This position is based at our Bengaluru office. 15 years full time education Important Notice We have been alerted to the existence of fraudulent messages asking job seekers to set up payment to cover various costs associated with establishing employment at Accenture. No one is ever required to pay for employment at Accenture. If you are contacted by someone asking for payment, please do not respond, and contact us at india.fc.check@accenture.com immediately. Equal Employment Opportunity Statement All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law. Please read Accenture’s Recruiting and Hiring Statement for more information on how we process your data during the Recruiting and Hiring process.