Oct 2022 – May 2025 · 2 yrs 7 mos · Santa Clara, California, United States

Jan 2020 – Oct 2022 · 2 yrs 9 mos · Newark, California, United States

Apr 2019 – Jan 2020 · 9 mos · Providence County, Rhode Island, United States

• Architected and deployed Enterprise Microsoft PKI infrastructure with three-tier CA hierarchy.
• Integrated PKI Private CAs with Aruba Clearpass-Network Access Control and configured GPOs, Venafi agents and testing scenarios for endpoint and user profiles.
• Setup Venafi Certificate and key management and integrated with various business lines to automate SSL certificate lifecycle management, auto provisioning and certificate discovery.
• Deployed and managed Safenet Luna HSMs, Cloud HSMs, and assisted with integrations for Vault, PKI, Code Signing and Venafi.
• Assisted with deploying Certificate automation solution for cloud and container services using Venafi, Hashicorp Vault and Cloud HSMs.
• Operationally handled SafeNet KeySecure, AWS KMS for data encryption, tokenization and centralize key management.
• Assessed cryptographic business operational readiness, conducted security reviews and contributed to business lines training.
• Subject matter expertise for cryptographic operations and guided projects with encryption needs and
• requirements to evaluate production readiness.
• Developed Certificate policies, Certificate practice statements, PKI Certificate support systems and ensuring compliance of enterprise-wide encryption policies and standards.
• Performed infrastructure deployments, performance analysis and optimization, monitoring, planning and executions.
• Acted as escalation and on-call for troubleshooting advanced issues in response to outages and incident.

Jul 2018 – Apr 2019 · 9 mos · United States

• Implemented and Managed Public Key Infrastructure for External, Internal, Device Authentication and SMIME certificate deployment solutions.
• Managed PKI day to day operations through processing and monitoring certificate/incident queues through Service Now.
• Developed an internal SSL certificate lifecycle management tool using REST API, Node JS, PostgreSQL and scripting to automate SSL certificate management lifecycle.
• Assisted infrastructure teams with certificate deployment strategies and implemented OCSP responder to support wireless authentication for endpoints using Cisco ASA and ISE.
• Managed Windows 2012/2016 and RHEL PKI Server functionalities including patching the operating systems, software upgrades and aligned procedures with organizational standards.
• Hand on experience with ADCS, GPOs, CDPs, CRLs, OCSP and Certificate templates to manage certificate deployments.
• Developed and updated architectural, network and procedural documentations including operational run-books and end user guides.
• Involved in PCI and compliance audits and updated Certificate Policies aligning with CAB and Webtrust.
• Conducted POCs on Venafi, Qualys Certview and Netflix Lemur to optimize cost, efficient monitoring and automate certificate lifecycle management.

Jun 2016 – Dec 2017 · 1 yr 6 mos · Huntsville-Decatur-Albertville Area

May 2013 – Jul 2013 · 2 mos

• Part of IT team supporting users with software, hardware, and networking issues.
• Linux systems administrator with experience in configuring, monitoring, upgrading and maintaining system hardware, software and related infrastructure.
• Strong analytical skills; able to work with technicians from various engineering disciplines to troubleshoot complex system-level issues.