Associate 2-KDNI
KPMG Global Services
Cyber IAM Managed Service - PKI HSM Assistant Manager
About this role
We are seeking a highly skilled and motivated Assistant Manager – PKI & HSM to lead the administration, maintenance, and optimization of the organization's Public Key Infrastructure (PKI) and Hardware Security Module (HSM) ecosystem. The role will be responsible for certificate lifecycle management, key management, HSM operations (on-premises and cloud), and integration of PKI services across Identity and Access Management (IAM) platforms. The ideal candidate will possess strong technical expertise in cryptography, PKI operations, certificate management, automation, and stakeholder engagement.
The ideal candidate will:
HSM Administration & Key Management
§Minimum 6+ years of hands-on experience administering Thales Luna Network HSMs, including partition management, client registration, HA configuration, backup/restore, firmware upgrades, and integration with Microsoft PKI environments.
§Administer and maintain Hardware Security Modules (HSMs) across on-premises and cloud environments.
§Manage cryptographic keys, hardware-backed certificate generation, key ceremonies, backup, recovery, and rotation activities.
§Ensure secure deployment and configuration of hardware-based keys supporting privileged access and critical enterprise applications.
§Monitor HSM health, capacity, availability, and security compliance.
PKI & Certificate Lifecycle Management
§Manage end-to-end certificate lifecycle processes including onboarding, issuance, renewal, rekeying, revocation, and decommissioning of digital certificates.
§Provision and manage PKI certificates for servers, applications, devices, and services requiring secure authentication and encryption.
§Administer and support Certificate Lifecycle Management (CLM) platforms to ensure compliance and operational efficiency.
§Renew and maintain Root Certificate Authority (CA) and Issuing CA certificates while ensuring minimal business impact.
Operational Support & Compliance
§Provide L2/L3 operational support for PKI and HSM infrastructure, ensuring high availability and service reliability.
§Support application teams with secure certificate deployment, installation, troubleshooting, and remediation activities.
§Partner with vulnerability and network scanning teams to conduct periodic discovery scans and identify unmanaged certificates, keys, and cryptographic assets.
§Investigate certificate-related incidents, outages, and security events, ensuring timely resolution and root cause analysis.
Maintain compliance with enterprise security standards, cryptographic policies, and regulatory requirements.
Certification Required:
•Thales Luna HSM Administrator Certification (Mandatory)
•Microsoft PKI / Active Directory Certificate Services (ADCS) certification (Preferred)
•CISSP, CCSP, or other Information Security certifications (Preferred)
•ITIL Foundation certification. (Preferred)
Behavioral / team skills
•Excellent communication (written and verbal) and interpersonal skills
•Ready to work in Shifts (on 3 shift rotation pattern)
•Flexibility to adapt to a variety of engagement types, working hours and work environments and locations
•Proven ability to work creatively and analytically in a problem-solving environment
•Desire to learn and contribute
•Focused and self-motivated approach to work
•Personal drive and positive work ethic to deliver results within tight deadlines and in demanding situations
The ideal candidate will:
HSM Administration & Key Management
§Minimum 6+ years of hands-on experience administering Thales Luna Network HSMs, including partition management, client registration, HA configuration, backup/restore, firmware upgrades, and integration with Microsoft PKI environments.
§Administer and maintain Hardware Security Modules (HSMs) across on-premises and cloud environments.
§Manage cryptographic keys, hardware-backed certificate generation, key ceremonies, backup, recovery, and rotation activities.
§Ensure secure deployment and configuration of hardware-based keys supporting privileged access and critical enterprise applications.
§Monitor HSM health, capacity, availability, and security compliance.
PKI & Certificate Lifecycle Management
§Manage end-to-end certificate lifecycle processes including onboarding, issuance, renewal, rekeying, revocation, and decommissioning of digital certificates.
§Provision and manage PKI certificates for servers, applications, devices, and services requiring secure authentication and encryption.
§Administer and support Certificate Lifecycle Management (CLM) platforms to ensure compliance and operational efficiency.
§Renew and maintain Root Certificate Authority (CA) and Issuing CA certificates while ensuring minimal business impact.
Operational Support & Compliance
§Provide L2/L3 operational support for PKI and HSM infrastructure, ensuring high availability and service reliability.
§Support application teams with secure certificate deployment, installation, troubleshooting, and remediation activities.
§Partner with vulnerability and network scanning teams to conduct periodic discovery scans and identify unmanaged certificates, keys, and cryptographic assets.
§Investigate certificate-related incidents, outages, and security events, ensuring timely resolution and root cause analysis.
Maintain compliance with enterprise security standards, cryptographic policies, and regulatory requirements.
Certification Required:
•Thales Luna HSM Administrator Certification (Mandatory)
•Microsoft PKI / Active Directory Certificate Services (ADCS) certification (Preferred)
•CISSP, CCSP, or other Information Security certifications (Preferred)
•ITIL Foundation certification. (Preferred)
Behavioral / team skills
•Excellent communication (written and verbal) and interpersonal skills
•Ready to work in Shifts (on 3 shift rotation pattern)
•Flexibility to adapt to a variety of engagement types, working hours and work environments and locations
•Proven ability to work creatively and analytically in a problem-solving environment
•Desire to learn and contribute
•Focused and self-motivated approach to work
•Personal drive and positive work ethic to deliver results within tight deadlines and in demanding situations
Frequently Asked Questions
Is the salary disclosed for the Cyber IAM Managed Service - PKI HSM Assistant Manager position at KPMG Global Services?
The salary for this Cyber IAM Managed Service - PKI HSM Assistant Manager role at KPMG Global Services is not publicly listed. Click "Apply Now" to learn more about the compensation package on their official careers page.
Where is the Cyber IAM Managed Service - PKI HSM Assistant Manager position at KPMG Global Services located?
This Cyber IAM Managed Service - PKI HSM Assistant Manager role at KPMG Global Services is based in Bangalore, Karnataka, India, Pune, Maharashtra, India. The position is listed as on-site or hybrid. Check the full job description or apply directly to confirm the work arrangement.
Is the Cyber IAM Managed Service - PKI HSM Assistant Manager role at KPMG Global Services full-time or part-time?
This is listed as a Full time position. It is posted as a Cyber IAM Managed Service - PKI HSM Assistant Manager role at KPMG Global Services.
How do I apply for the Cyber IAM Managed Service - PKI HSM Assistant Manager position at KPMG Global Services?
Click the "Apply Now" button on this page. You will be redirected to KPMG Global Services's official application portal hosted on oraclecloud where you can submit your application directly.
When was the Cyber IAM Managed Service - PKI HSM Assistant Manager job at KPMG Global Services posted?
This Cyber IAM Managed Service - PKI HSM Assistant Manager position at KPMG Global Services was posted on Aug 24, 2026. Apply as soon as possible — early applications are often reviewed first.
Cyber IAM Managed Service - PKI HSM Assistant Manager
KPMG Global Services
You'll be redirected to KPMG Global Services's official application page on oraclecloud.