Skip to content

Open nowPosted 40 days ago

Senior Analyst - IAM PKI

PepsiCo2,572 open roles

Where
Hyderabad, Telangana, India
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Analyst - IAM PKIPepsiCo · Hyderabad, Telangana, India
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on PepsiCo's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. PepsiCo postings stay open a median of 1 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 57.8%60 days
This job: posted 40 days ago

PepsiCo median: 1 days open

The posting

Overview Main purpose of role PKI Sr. Analyst will be responsible for managing the end-to-end digital certificates and lifecycle management solution across all supporting components. This role includes Engineering, Integrations, Operations and maintaining the global PKI and NHI environment at par with industry standard and best practices. Responsibilities Accountabilities Lead the digital certificate services space, a digital form of identification where consumers, businesses and organizations can exchange data securely, using public key infrastructure (PKI), Enterprise Key and Certificate Lifecycle management (EKCM), Hardware Security Modules (HSM) solutions for global PepsiCo. Drive technical discussions to understand digital certificate services requirements while partnering with application teams who design and implement solutions. Ensure digital certificate services provided align with PepsiCo’s security standards and align with industry best practices. Manage the engineering and operations teams (people and work) for digital certificate services by mentoring junior members, ensuring SLAs are met, and ensuring tasks are properly completed. Manage the certificate services space end-to-end from designing solutions for services for new integrations and patterns, to implementing projects in the certificate services space, and providing sustained support across all products in the certificate services space. Drive automation initiatives for certificate services including certificate provisioning and monitoring for digital certificate services by identifying opportunities for enhancements and implementation with no issues. Maintain and enhance global solutions for the digital certificate area ensuring high availability and disaster recovery across regions with resiliency including planning and delivering upgrades. Provide guidance, educate key stakeholders on certificate life cycle processes and procedures. Lead incident management for digital certificate services across the solution stack driving root cause and resolution within service level agreement. Responsibilities Engineering and solutioning PKI design and cross functional integrations Working on Non-Human Identity lifecycle management Assisting users on submitting SSL certificate requests Working on Incidents, alerts, service requests in ITSM Issuing and managing both Internal and external CA certificates using cert management tool Assisting users to download the certificate from cert management tool Domain management for issuing external (Entrust) SSL certificates. Provisioning (pushing SSL certificates into server) of SSL certificates to AWS, Java JKS and Windows servers Provide support on installation of SSL certificates in Windows IIS, JAVA JKS, Unix/Linux, Apache, Tomcat, Azure Key vault, AWS ALB/ELB, F5’s etc. Provide support on generating a CSR or converting certificate formats using open SSL Maintaining data and sending follow up emails on certificates expiry, before they get expired, to avoid warnings and outages Preparing and presenting weekly and monthly reports on Service requests, Incidents, and alerts Follow up with users for closure of pending tickets. Providing end to end operational support to internal customers. Managing certificate and key ownership data and keeping it up to date Working Knowledge of ITSM process (Request management, change management, Incident management) on tools such as SNOW Configuring and managing ADCS, CRL and OCSP Services Document all key generation and management activities Creating and maintaining CPS, architecture, Process and Run book documents Communicate progress, findings, and ensure successful handoff of deliverables to program and operational teams Provide detailed project Status to stakeholders Collect feedback from stakeholders and users of security capabilities and incorporate that feedback into service Qualifications Years of exp: Overall IT Experience – 10+ years Security experience - 8+ PKI, EKCLM, NHI Management - 7+ Power shell scripting - 7+ Cloud platforms (Azure, AWS)- 5+ API development and integration - 5+ BS/BTech in Engineering Mandatory tech skills Good working knowledge of cryptographic and modern auth protocols Well versed with Certificate based authentication and device trust Well versed with Non-Human Identity management In depth knowledge of Active Directory Certificate Services (AD CS) In depth knowledge of CRL and OCSP and their functionality Familiarity with PKI and cryptographic terminology and management Knowledge of CLM tool such as Venafi, AppviewX, Keyfactor added advantage Hands on experience and Working knowledge of Thales HSM Hands on experience and working knowledge of public CA Good working knowledge of cloud platforms (Azure and AWS) and SaaS offerings for PKI and EKCLM Knowledge of Active Directory domain service Knowledge of scripting languages such as PowerShell, API based automation Knowledge of ITSM processes like request, incident, change management etc. Mandatory non tech skills Strong oral and written communications skills Ability to work within project timelines Deliver outcomes with a little supervision, must be a self-starter and self-motivator Proactive approach and enthusiasm for problem identification and solving Ability to think strategically and suggest creative solutions Ability to synthesize complex requirements into simple business practices Flexible and able to adapt to changing priorities Differentiating factors Knowledge of various Identity and Access Management technologies and platforms Working knowledge of Active Directory Domain services Working knowledge of Modern Auth protocols and single sign on Good to have knowledge of Quantum cryptography and PQC protocols. God to have knowledge of concepts like Device Trust, Zero trust and password less authentication

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against PepsiCo's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on PepsiCo's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    PepsiCo's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.