Application Support Engineer

Project Role : Application Support Engineer Project Role Description : Act as software detectives, provide a dynamic service identifying and solving issues within multiple components of critical business systems. Must have skills : Microsoft Windows Server Administration Good to have skills : NA Minimum 3 year(s) of experience is required Educational Qualification : 15 years full time education

Summary:

The Certificate Management Engineer is responsible for end-to-end Public Key Infrastructure (PKI) operations across DigiCert and Microsoft PKI (ADCS) environments. This role ensures secure, compliant, and highly available certificate services supporting enterprise applications, servers, users, and devices. The engineer will manage the full certificate lifecycle, maintain Windows Server–based CA infrastructure, integrate with enterprise tools (e.g., ServiceNow), and provide L3 operational support while aligning with internal security standards and controls.

Roles & Responsibilities:

• Certificate & PKI Management
• Manage the complete certificate lifecycle (discovery, issuance, renewal, revocation, and retirement) for internal and external certificates using DigiCert and Microsoft PKI (ADCS) platforms.
• Maintain an accurate inventory / book of records for certificates and keys, ensuring visibility across issuing CAs and enterprise scanning tools.

Coordinate with DigiCert support for certificate issues, renewals, outages, and product-related escalations, providing regular status and SLA reporting.

• Microsoft PKI (ADCS) Administration
• Administer Root and Issuing Certificate Authorities on Windows Server, including CA configuration, certificate templates, CRL/CDP/AIA management, and policy enforcement.
• Implement and maintain ADCS security controls in line with enterprise PKI security standards and Microsoft recommendations.
• Perform CA upgrades, migrations, and disaster recovery activities following approved enterprise procedures and documentation.
• Windows Server Administration
• Provide L3 administration and support for Windows Server platforms hosting - - PKI components (ADCS, CRL servers, supporting services).
• Monitor server health, availability, patching, and performance to ensure resilient PKI services.

-Support related services such as AD FS, Web Application Proxy, and identity-related Windows roles where PKI integration is required. -Automation, Integration & Compliance -Integrate PKI and certificate lifecycle processes with ServiceNow or similar ITSM tools for discovery, automation, and reporting. -Support automation initiatives to reduce manual certificate operations and prevent certificate-related outages.