Identity & Access Management Technical Lead

About Our Company Ameriprise India LLP has been providing client based financial solutions to help clients plan and achieve their financial objectives for 20 years. We are part of Ameriprise Financial Inc., a US financial planning company headquartered in Minneapolis with a global presence and diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of year-end 2024. The firm’s focus areas include Asset Management and Advice, Retirement Planning and Insurance Protection. Be part of an inclusive, collaborative culture that rewards you for your contributions, and work with other talented individuals who share your passion for doing great work. You’ll also have plenty of opportunities to make your mark at the office and a difference in your community. So, if you're talented, driven and want to work for a strong, ethical company that cares, take the next step and create a career at Ameriprise India LLP. Job Description A Technical Lead in the identity and access management team is needed to help with the design, implementation, configurations/development of the Security Certificate LifeCycle. Key Responsibilities The Technical Lead will be responsible for :- - Work as PKI (Public Key Infrastructure) Tech-Lead. - Administer and operate Microsoft PKI infrastructure. - Administer and operate certificate lifecycle management solution i.e. Venafi. - Work on implementation of automatic certificate provisioning solution with tools like F5, app servers (Apace\IIS), AWS ACM, AWS EKS, Azure, IBM Datapower, Connect Direct etc. - Provide technical support for PKI and different certificate deployment implementations on multiple systems like VPN, Wireless, automatic certificate provisioning etc. - Maintain certificate lifecycle management workflow and related documentation. - Maintain and formulate Standard Operating Procedures. - Responsible for reporting on PKI infrastructure. - Responsible for AWS IAM, ACM operations. - Responsible for Microsoft Active Directory operations. - Provide On-Call support during weekend. Required Qualifications Degree in computer science & engineering, IT or equivalent technical degree with:- - 7+ years of relevant experience in supporting PKI infrastructure. - Strong understanding of X.509, RSA, SSL/TLS, Wildcard, SAN certificate and certificate management processes. - Operations experience of Active Directory Certificate Services (Microsoft PKI - 2016). - Should have hands on experience of a certificate lifecycle management tool and processes. . - Should have experience of integrating certificate management tool with various applications\tools in an infrastructure for managing communications and crypto objects i.e. Private keys and certificate securely. - Should have experience in AWS IAM. Preferred Qualifications - Knowledge of the Venafi tool. - Good to have experience in Microsoft Active Directory. - Good to have experience in HSM. - Good to have experience of certificate provisioning via an MDM solution. - Good communication and presentation skills. - Ready to take initiatives and accountability of the project deliverables. In-Office Collaboration We are a client-centric, relationship-based business. Working together, in-person, is foundational to how we achieve results. By fostering a culture of face-to-face collaboration, idea sharing, productivity and personal connection, we deliver for our stakeholders — clients, advisors, employees and shareholders. Our employees work in the office at least three (3) days per week, with flexibility to work from home two (2) days per week. Some roles may require additional in-office time or different in-office expectations, and specific requirements will be discussed during the hiring process. Full-Time/Part-Time Full time Timings (4:45p-1:15a) India Business Unit AWMPO AWMP&S President's Office Job Family Group Technology Ameriprise India LLP is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, genetic information, age, sexual orientation, gender identity, disability, military status, veteran status, marital status, pregnancy, family status or any other basis prohibited by law. We are committed to fostering an inclusive and accessible recruitment process for individuals with disabilities. If you require a reasonable accommodation to participate in the application or interview process, speak to your recruiter to discuss how we can support you.