Mar 2023 – Jul 2025 · 2 yrs 4 mos

Jul 2020 – Mar 2023 · 2 yrs 8 mos

• Setup Thales Luna Network and Backup HSMs.
• Integrated Luna HSMs with Microsoft PKI , DigiCert MPKI and Custom Java applications.
• Integrating Luna HSMs with Kubernetes.
• Integrating HSMs with Double Key Encryption Service.
• Integrating HSMs with Quantinuum Service to inject entropies.
• Setup 2 tier Microsoft PKI for SMIME certs.
• Upgraded DigiCert Managed PKI from Windows 2008R2 to 2019.
• Migrated Microsoft PKI for VPN from Windows 2012R2 to 2019.
• Troubleshooting HSM , PKI and Safenet Trusted Access issues

Oct 2018 – Jul 2020 · 1 yr 9 mos · Bengaluru Area, India

• Certificate Life-cycle Management Automation using AppviewX Cert+ and PKI Implementation:
• (CERT+ is a Certificate Lifecycle Automation Tool from AppViewX)
• Integrated 'APPVIEWX CERT+' with Public CAs like Digicert.
• Integrated 'APPVIEWX CERT+' with Enterprise CAs like Microsoft PKI and EJBCA.
• Automated the SSL Certificate Discovery from the entire Infrastructure using Cert+.
• Integrated 'CERT+' with Active Directory LDAP for authenticating those users who need access to CERT+.
• Integrated 'CERT+' with ADFS for SSO.
• Integrated 'CERT+' with SMTP for triggering mails to applications owners for approvals for any CLM activity.
• Integrated 'Mobile Iron' with 'CERT+' for managing the MDM certificates.
• Microsoft PKI Implementation:
• Deployed a two tier PKI architecture for the client.
• Implemented SSL for webservers and SSL template configuration.
• Implemented Auto-Enrollment for User certificates and Wireless Certificates.

Aug 2017 – Sep 2018 · 1 yr 1 mo · Bengaluru Area, India

• Microsoft PKI Implementation:
• Deployed a two tier PKI architecture for the client.
• Implemented Secure Email Configuration.
• Implemented SSL for webservers and SSL template configuration.
• Implemented Auto-Enrollment for User certificates and Wireless Certificates.
• Documented the process for day to day operation in the environment like ‘Enrollment’, ‘Database Backup’ , ‘Health-Check’, ‘Certificate Recovery’.
• PKI Management:
• Complete Management of PKI infrastructure.
• Fetching the Certificates from the CA database.
• Issuing, Revoking and Troubleshooting Certificates issues for Email Encryption, SSL, Code Signing.
• Checking the CRL health using PKIVIEW and ‘CERTUTIL -URL’ commands and also checking whether the clients are able to reach the CDP and AIA.
• Created a lab Environment similar to the production for testing and applying patches.
• Working on Wave Disk Encryption.
• Providing training to L1 and L2 team members on PKI.
• Created a script for sending Automatic Reminders for certificate expiry via outlook

Jan 2015 – Jul 2017 · 2 yrs 6 mos · Noida Area, India

• HSM Implementation and integrating PKI infrastructures with HSMs :
• Worked on Safenet Luna EFT and Safenet Luna Protect Server HSMs.
• Worked with APAC, EMEA and APAC customers to configure PKI architecture.
• Implemented Two Tier and Three Tier architecture by integrating it with Safenet HSMs.
• Performed CA Migration using HSMs.
• Implemented SSL encryption for Web-Servers.
• Working on CSPs and KSPs provided by Safenet
• Working on JCE/JCA, integrating the Java Apisfrom Safenet and debugging them.
• Troubleshooting, Testing and Executing the propriety Java Samples for Encryption,
• Decryption, Signing etc from Safenet.
• Integrating the HSMs with Safenet CSPs and KSPs and Troubleshooting issues.
• Configuring the Network , Managing Users , Installing and Uninstalling packages using
• the Linux Shell on the HSM boxes.
• Worked Closely with ‘Pre-Sales’ and ‘Solutions Engineer’ teams to gather requirements for PKI deployment and its integration with HSMs.

Oct 2013 – Jan 2015 · 1 yr 3 mos · Gurgaon, India

• PKI Operations.
• 1. Maintaining precise configuration of CAs.
• 2. Configuring 2 tier , 3tier CA hierarchy for EMEA clients using Windows Server 2008
• 3. Performing CA Migration.
• 4. Performing Manual and Automatic Enrollment.
• 5. Complete Management of PKI infrastructure.
• 6. Issuing, Revoking and Troubleshooting Certificates issues for Email Encryption, SSL, Code Signing.
• 7. Maintaining the trusted CA list.
• 8. Creating PKI Certificate Request on Behalf of Users.
• 9. Performing CA backup and Recovery.
• 10. Integrating the etokens with HSM for authentications

Mar 2012 – Aug 2013 · 1 yr 5 mos · Noida Area, India

• IT Infrastructure L1 Support and Training
• 1. Troubleshooting issues on Windows.
• 2. Troubleshooting DHCP and DNS issues.
• 3. Troubleshooting Issues on ISP.
• 4. Troubleshooting Email encryption , Code Signing and Entrust SSL certificate
• Issues.
• 5. Troubleshooting Issues related Certificate Expiry for Smart Cards and Etokens.
• 6. Working on WAVE Disk Encryption.
• 7. Worked on Remedy , Siebel and Service Now Ticketing Tools.
• 8. Recovering Certificate for Using KRT tool.
• 9. Worked on SQL.
• 10. Worked as a Corporate Trainer.