Kyndryl is hiring a PKI & Certificate Lifecycle Engineer, a fully remote role linked to its Bengaluru office. You will run and support DigiCert TLM and related PKI services, handling certificate requests, issuance, renewal, revocation and inventory, and help teams with TLS, S/MIME, code-signing, VPN, Wi-Fi and machine identity certificates. You will troubleshoot trust and deployment problems, work with network, cloud and application teams on onboarding, and write scripts and workflows that automate monitoring and renewals. You need 3 or more years in PKI, certificate management, cybersecurity or infrastructure, a solid grasp of X.509, certificate chains and SSL/TLS, and scripting in Python, PowerShell or Bash. Experience with DigiCert, Venafi, Keyfactor or Microsoft AD CS, and with ACME, SCEP, Azure Key Vault or AWS Certificate Manager, is a plus.