
Manager, Cybersecurity Engineering, PKI
- Hyderabad, Telangana
- Permanent
- Full-time
- Understand divisional and site business system requirements for PKI
- Design, deploy and maintain enterprise PKI solutions, on-premise and in the cloud, including Certificate Authorities (CAs), Hardware Security Modules (HSMs), Enterprise Key Management Service (KMS), Code Signing, Validation and Revocation Checking Services (OCSP, CRL)
- Integrate PKI solutions with enterprise systems, applications, network, infrastructure and cloud platforms
- Implement certificate automation solutions
- Develop and maintain PKI-related documentation, policies and procedures
- Act as technical escalation point for PKI Operations team and provide assistance for resolving PKI-related incidents, outages, and performance issues
- Collaborate with security, infrastructure, DevOps, and application teams to provide PKI expertise
- Demonstrate ability to stay current with all industry trends/best practices, as well as new product releases so that we can maintain a proactive 3-year systems management roadmap
- 5+ years of experience in designing and implementing global PKI solutions supporting Windows, Mac OS, Linux, iOS and Android devices
- Experience with Microsoft AD CS and HSMs
- Build, manage and troubleshoot Enterprise PKI solutions
- Monitor and administer certificate usage, deployment, and lifecycle
- Configure and deploy certificate templates
- Work with different certificate enrollment protocols (e.g. NDES, ACME, EST)
- Have a solid understanding of cryptographic algorithms and hashing functions
- Understand encryption protocols and certificate-enabled applications, such as TLS, HTTPS, LDAPS
- Have a solid understanding of Windows, Linux, and web-based systems
- Have a solid understanding of certificate validation and revocation checking (OCSP, CRL)
- Have ability to work under pressure in troubleshooting a production incident scenario and quickly identifying a resolution
- Have exposure to PQC readiness efforts and shortened validity period transitions
- Have a strong understanding of Zero Trust security principles and Identity & Access management (IAM)
- Demonstrate ability to effectively convey technical details to non-IT / business colleagues
- Ability to work efficiently in a matrixed environment with a global team comprised of company staff, contractors, and vendors
- Strong analytical and problem-solving skills and demonstrable ability to work independently as well as in a team environment
- Experience with Microsoft AD CS
- Experience with Venafi’s enterprise certificate management solution or equivalent
- Experience with automated certificate provisioning
- Experience with installation and configuration of Entrust HSMs
- Experience with Enterprise Key Management Service
- Familiarity with DevOps tools for PKI Integration (e.g. Jenkins, Ansible, GitHub)
- Good working knowledge of ITIL framework and AGILE principles
- Working knowledge and understanding of IT Service Management (Change, Incident, Knowledge and Problem Management) with tools such as ServiceNow
- Willingness to challenge, ask questions, share ideas
- Cyber Security certification (e.g. CompTIA Security+, ISC2 SSCP, ISC22 CISSP, Microsoft Security Certifications), Venafi certification (Venafi Security Administrator) is a plus
Merck & Co., Inc., Rahway, NJ, USA, also known as Merck Sharp & Dohme LLC, Rahway, NJ, USA, does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for this position will be deemed the sole property of our company. No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place, introductions are position specific. Please, no phone calls or emails.Employee Status: RegularRelocation:VISA Sponsorship:Travel Requirements:Flexible Work Arrangements: HybridShift:Valid Driving License:Hazardous Material(s):Required Skills: Design Applications, Information Security, Security Operations, SLA Management, Software Development, Software Development Life Cycle (SDLC), System Designs, Technical Advice, Vulnerability ScanningPreferred Skills:Job Posting End Date: 09/30/2025*A job posting is effective until 11:59:59PM on the day BEFORE the listed job posting end date. Please ensure you apply to a job posting no later than the day BEFORE the job posting end date.