PKI Services Manager

This is a fully remote position, open to applicants in India, +1 more country.

📋 Description

• Take full ownership of the end-to-end service management for Agilent’s MPKI services, which includes user certificate enrollment, lifecycle management, administration of cloud HSM, and provisioning of device certificates.

• Manage relationships with the MPKI vendor, ensuring suppliers meet SLAs, adhere to security standards, and comply with various requirements.

• Supervise outsourced MPKI support and operations to guarantee efficient and seamless service delivery.

• Ensure compliant processes for certificate provisioning and deprovisioning.

• Oversee automated and exception-based solutions for certificate enrollment.

• Promote automation and continuous enhancement throughout the certificate lifecycle.

• Act as the service owner and administrator for the Palo Alto Networks Prisma Access Browser (PAB), which is Agilent’s secure Chromium-based browser for unmanaged devices.

• Design, configure, and uphold access and data-control policies for PAB, including last-mile DLP controls.

• Set up and optimize browser-based threat protections, including defenses against phishing, malware, and risky extensions, along with generative-AI data guardrails.

• Implement sign-in and access policies based on real-time device posture, integrating with Microsoft Entra ID and the broader Prisma SASE / Zero Trust framework.

• Oversee the relationship with the Palo Alto Networks vendor and coordinate with stakeholders across Security, End-User Computing, and IT departments.

• Track adoption rates, resolve user-reported issues, and continuously enhance policy coverage and user experience.

• Contribute to operations, project, and engineering efforts involving Active Directory, Microsoft Entra ID, and Microsoft Intune.

• Collaborate with a multidisciplinary team of application developers, operations engineers, and architects to grasp complex requirements and transform them into automated solutions.

• Work alongside colleagues to support and enhance architecture, systems, processes, standards, and tools.

• Actively engage in the development, implementation, and operation of Identity and Access Management (IAM) strategies.

⛳️ Requirements

• Bachelor’s or Master’s Degree or equivalent university qualification.

• Minimum of 7 years of experience in Managed Public Key Infrastructure.

• Familiarity with the DigiCert platform is preferred.

• Strong understanding of both Entra ID and Active Directory.

• Knowledge of Microsoft Intune for certificate delivery to users and devices.

• Demonstrated experience managing outsourced suppliers to meet SLAs and compliance standards.

• Familiarity with testing and development processes and methodologies.

• Comprehensive understanding of information technology environments with a global infrastructure.

• Experience in implementing and applying security best practices across all initiatives.

• Excellent cross-functional collaboration and communication skills.

🏝️ Benefits

• Flexible work arrangements.

• Opportunities for professional development.