Responsibilities
- Architect and productize identity and PKI services, including reference architectures, platform evaluation, and service definitions.
- Design PKI components including X.509 and RFC 5280 certificate profiles, CA hierarchies, CP/CPS, revocation, and audit frameworks.
- Define HSM and key-custody solutions and participate hands-on in witnessed key ceremonies.
- Support enrollment and renewal protocols including ACME, EST, SCEP, CMP, and Microsoft auto-enrollment.
- Architect workload identity using SPIFFE/SPIRE, Kubernetes service account tokens, cloud identity federation, mTLS, and service meshes.
- Design Kubernetes, cloud IAM, machine identity governance, cryptographic inventory, and post-quantum migration solutions.
Requirements
- Experience architecting and productizing identity or PKI services beyond implementation-only work.
- Deep PKI design knowledge covering X.509, RFC 5280, CA hierarchies, certificate profiles, CP/CPS, CRL, OCSP, WebTrust, and ETSI.
- Experience with HSM and key custody concepts including PKCS#11, FIPS 140-3, and witnessed key ceremonies.
- Experience with Microsoft AD CS and at least one of EJBCA, Entrust, or DigiCert.
- Experience with CLM platforms such as Idira Certificate Manager/Venafi, Keyfactor, AppViewX, or DigiCert Trust Lifecycle Manager.
- Knowledge of Kubernetes at administrator depth and cloud IAM across Azure, AWS, and GCP.
- Experience with machine identity governance, including service accounts, managed identities, service principals, OAuth application grants, and API keys.
- Knowledge of post-quantum cryptography, NIST FIPS 203/204/205, hybrid certificates, cryptographic inventory, and crypto-agility.
- Experience with IDnomic, machine identity governance platforms, cryptographic discovery tooling, or secrets management platforms is beneficial.
Benefits
- Work location is Mumbai or Bangalore.
- Atos highlights diversity, inclusion, and a fair work environment.
Tech Stack
Categories
About Atos
Atos Group is a global leader in digital transformation with c. 56,000 employees and annual revenue of c. €7.2 billion (at the go-forward perimeter), operating in 54 countries under two brands - Atos for services and Eviden for products and systems. European number one in cybersecurity and a leader in cloud, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. Atos Group is listed on Euronext Paris. Atos is the services brand of Atos Group, delivering AI powered, secure and end to end digital services to public and private organizations worldwide. Atos designs, builds and run digital environments that are critical to performance, resilience and sovereignty, helping clients keep control of their data, infrastructure and compliance, with clear accountability from strategy to operations. With more than 54,000 people serving 4,500+ clients in 54 countries, Atos helps modernize core IT, accelerate cloud and data transformation, strengthen cybersecurity and enable secure digital workplaces, delivering impact for clients, employees and society at large. Atos offers end-to-end IT services across the cloud, cybersecurity, data and AI, application services, smart platforms and digital workplace, as well as localized consulting and advisory services under its brand Atos Amplify. Atos is trusted to operate complex, business-critical environments, especially in regulated and sovereign contexts.