Technical Analyst

A fantastic opportunity has arisen for a technical role to join Computacenter's dynamic and rapidly expanding Digital Engineering . Successful applicants will be joining a truly global organisation, delivering services into over 70 countries worldwide, with major offices across Europe, the Americas, Africa and Asia; a recognised leader of the IT services business with a unique vendor-independent, infrastructure-focused perspective on the market.

You'll get to work with some of the most talented and passionate people in the business. You'll have the opportunity to apply your knowledge to some of the highest profile projects and customers in the market from our Computacenter office in Bangalore.

This role will be primarily focused on delivering a BAU / Project services within a shared service delivery model.

With open access to thought leaders and major industry players you'll get exposure to leading edge technologies which will enable you to advance your skills.

What You'll Do

PKI and Certificate Authority Operations

• Administer Microsoft Active Directory Certificate Services (AD CS), including offline root CAs and enterprise issuing CAs.
• Maintain CA configurations, certificate templates, enrollment permissions, and auto-enrollment policies.
• Maintain and monitor Certificate Revocation List (CRL) and Authority Information Access (AIA) publication services; support OCSP where implemented.
• Support secure key storage, and documented key ceremonies under approved dual-control procedures.
• Perform CA maintenance, patching, backup validation, and disaster recovery exercises through established change-management processes.

Public TLS and Certificate Lifecycle Management

• Manage internal and publicly trusted certificates throughout discovery, request validation, issuance, deployment, monitoring, renewal, replacement, revocation, and retirement.
• Manage public TLS certificates through providers such as DigiCert and Sectigo, including domain and organization validation, issuance, reissuance, and renewal.
• Administer public CA accounts, access permissions, approved certificate profiles, and validation records.
• Operate certificate lifecycle management platforms, including discovery scans, CA connectors, workflows, expiration alerts, and reporting.
• Maintain accurate certificate inventories with application ownership, deployment locations, business criticality, and renewal responsibilities.
• Coordinate certificate installation and replacement with application, server, network, and cloud teams; verify successful deployment.
• Monitor expiration risks and renewal failures, escalate unresolved issues, and drive remediation to prevent certificate-related outages.

Certificate Automation and Integration

• Design, implement, and maintain automation for certificate requests, issuance, renewal, deployment, validation, and revocation using PowerShell, REST APIs, ACME, and certificate management platforms.
• Integrate automated workflows with internal and public CAs, web servers, load balancers, cloud services, and application platforms.
• Automate CSR generation and certificate installation while maintaining secure private-key handling and appropriate access controls.
• Implement failure alerts, controlled retries, and post-deployment checks to confirm that renewed certificates are installed and actively served.
• Integrate certificate workflows with ServiceNow, CMDB, monitoring, and security logging platforms.
• Maintain reusable scripts, version-controlled integrations, and documentation to reduce manual effort and operational errors.

Certificate Tools and Troubleshooting

• Use OpenSSL to generate private keys and CSRs; create and extract PFX/PKCS#12 packages; and convert certificates between PEM and DER formats.
• Securely package certificates with their private keys and intermediate CA certificates for deployment.
• Inspect certificate subjects, issuers, SANs, validity periods, key usage, extended key usage, and fingerprints.
• Verify certificate chains against trusted roots and confirm that certificates match their private keys.
• Troubleshoot missing or incorrect intermediate certificates, untrusted roots, expired or revoked certificates, and incorrect certificate bundles.
• Diagnose TLS/mTLS handshake failures, hostname mismatches, certificate binding issues, and CRL/OCSP validation failures.
• Troubleshoot AD CS enrollment and auto-enrollment failures, template configurations, and permissions.
• Investigate trust issues across Windows and Linux trust stores, Java keystores, browsers, web servers, load balancers, and cloud services.
• Use OpenSSL, certutil, PowerShell, application logs, and network traces to identify root causes and document corrective actions.

Operational Support and Governance

• Maintain operational runbooks, technical documentation, audit evidence, and service metrics.
• Follow privileged-access, separation-of-duties, and secure key-handling requirements.
• Support security reviews, incident investigations, and remediation activities.
• Provide technical guidance to L2 support teams and application owners.

Participate in an agreed on-call rotation and scheduled maintenance activities.