PKI Sr. Analyst - SME

At Pepsi. Co, you'll find the opportunity to grow your career, make an impact, and help shape what's next. As one of the world's leading food and beverage companies, our beloved brands—including Gatorade, Lay's, and Quaker—help create smiles with every sip and bite. Behind our products is a connected system that starts with how we source and grow ingredients alongside farmers and extends to how we make, move, and deliver products while driving positive impact for our business and communities.

Responsibilities

Lead the digital certificate services space, a digital form of identification where consumers, businesses and organizations can exchange data securely, using public key infrastructure (PKI), Enterprise Key and Certificate Lifecycle management (EKCM), Hardware Security Modules (HSM) solutions for global Pepsi. Co. Drive technical discussions to understand digital certificate services requirements while partnering with application teams who design and implement solutions.

Ensure digital certificate services provided align with Pepsi. Co’s security standards and align with industry best practices. Manage the engineering and operations teams (people and work) for digital certificate services by mentoring junior members, ensuring SLAs are met, and ensuring tasks are properly completed. Manage the certificate services space end-to-end from designing solutions for services for new integrations and patterns, to implementing projects in the certificate services space, and providing sustained support across all products in the certificate services space.

Drive automation initiatives for certificate services including certificate provisioning and monitoring for digital certificate services by identifying opportunities for enhancements and implementation with no issues. Maintain and enhance global solutions for the digital certificate area ensuring high availability and disaster recovery across regions with resiliency including planning and delivering upgrades.

Provide guidance, educate key stakeholders on certificate life cycle processes and procedures. Lead incident management for digital certificate services across the solution stack driving root cause and resolution within service level agreement. Technical Requirements: BS/BTech in Engineering or a related field 8+ years of overall IT experience 6+ years of Security experience 7+ years of PKI, EKCLM, and NHI Management experience 7+ years of Power.

Shell scripting experience 5+ years of experience with cloud platforms (Azure, AWS) 5+ years of API development and integration experience Good working knowledge of cryptographic and modern auth protocols Well versed with Certificate based authentication and device trust Well versed with Non-Human Identity management In depth knowledge of Active Directory Certificate Services (AD CS) In depth knowledge of CRL and OCSP and their functionality Familiarity with PKI and cryptographic terminology and management Knowledge of CLM tool such as Venafi, AppviewX, Keyfactor added advantage Hands on experience and Working knowledge of Thales HSM Hands on experience and working knowledge of public CA Good working knowledge of cloud platforms (Azure and AWS) and SaaS offerings for PKI and EKCLM Knowledge of Active Directory domain service Knowledge of scripting languages such as Power.

Shell, API based automation Knowledge of ITSM processes like request, incident, change management etc. Non-technical requirements: Strong oral and written communications skills Ability to work within project timelines Deliver outcomes with a little supervision, must be a self-starter and self-motivator Proactive approach and enthusiasm for problem identification and solving Ability to think strategically and suggest creative solutions Ability to synthesize complex requirements into simple business practices Flexible and able to adapt to changing priorities At the heart of Pepsi.

Co are our people: professionals who bring curiosity, drive, and fresh thinking, working together to turn ideas into action. Across functions, teams, and markets, we collaborate to solve challenges, unlock new opportunities, and create meaningful impact for our consumers, customers, and communities. No matter your role, you'll be part of a connected community where your contributions matter, your voice is heard, and your development is supported.

With opportunities to grow, belong, and smile, Pepsi. Co offers more than a place to build your career—it offers the chance to help create what's next.

Overview

This role will be responsible for managing end-to-end digital certificate and lifecycle management solutions across all supporting components. The role includes Engineering, Integrations, Operations, and maintenance of the global PKI and NHI environment, ensuring alignment with industry standards and best practices.

Responsibilities

At Pepsi. Co, you'll find the opportunity to grow your career, make an impact, and help shape what's next. As one of the world's leading food and beverage companies, our beloved brands—including Gatorade, Lay's, and Quaker—help create smiles with every sip and bite. Behind our products is a connected system that starts with how we source and grow ingredients alongside farmers and extends to how we make, move, and deliver products while driving positive impact for our business and communities.

Responsibilities

Lead the digital certificate services space, a digital form of identification where consumers, businesses and organizations can exchange data securely, using public key infrastructure (PKI), Enterprise Key and Certificate Lifecycle management (EKCM), Hardware Security Modules (HSM) solutions for global Pepsi. Co. Drive technical discussions to understand digital certificate services requirements while partnering with application teams who design and implement solutions.

Ensure digital certificate services provided align with Pepsi. Co’s security standards and align with industry best practices. Manage the engineering and operations teams (people and work) for digital certificate services by mentoring junior members, ensuring SLAs are met, and ensuring tasks are properly completed. Manage the certificate services space end-to-end from designing solutions for services for new integrations and patterns, to implementing projects in the certificate services space, and providing sustained support across all products in the certificate services space.

Drive automation initiatives for certificate services including certificate provisioning and monitoring for digital certificate services by identifying opportunities for enhancements and implementation with no issues. Maintain and enhance global solutions for the digital certificate area ensuring high availability and disaster recovery across regions with resiliency including planning and delivering upgrades.

Provide guidance, educate key stakeholders on certificate life cycle processes and procedures. Lead incident management for digital certificate services across the solution stack driving root cause and resolution within service level agreement.

Qualifications

BS/BTech in Engineering or a related field 8+ years of overall IT experience 6+ years of Security experience 7+ years of PKI, EKCLM, and NHI Management experience 7+ years of Power. Shell scripting experience 5+ years of experience with cloud platforms (Azure, AWS) 5+ years of API development and integration experience Good working knowledge of cryptographic and modern auth protocols Well versed with Certificate based authentication and device trust Well versed with Non-Human Identity management In depth knowledge of Active Directory Certificate Services (AD CS) In depth knowledge of CRL and OCSP and their functionality Familiarity with PKI and cryptographic terminology and management Knowledge of CLM tool such as Venafi, AppviewX, Keyfactor added advantage Hands on experience and Working knowledge of Thales HSM Hands on experience and working knowledge of public CA Good working knowledge of cloud platforms (Azure and AWS) and SaaS offerings for PKI and EKCLM Knowledge of Active Directory domain service Knowledge of scripting languages such as Power.

Shell, API based automation Knowledge of ITSM processes like request, incident, change management etc. Non-technical requirements: Strong oral and written communications skills Ability to work within project timelines Deliver outcomes with a little supervision, must be a self-starter and self-motivator Proactive approach and enthusiasm for problem identification and solving Ability to think strategically and suggest creative solutions Ability to synthesize complex requirements into simple business practices Flexible and able to adapt to changing priorities At the heart of Pepsi.

Co are our people: professionals who bring curiosity, drive, and fresh thinking, working together to turn ideas into action. Across functions, teams, and markets, we collaborate to solve challenges, unlock new opportunities, and create meaningful impact for our consumers, customers, and communities. No matter your role, you'll be part of a connected community where your contributions matter, your voice is heard, and your development is supported.

With opportunities to grow, belong, and smile, Pepsi. Co offers more than a place to build your career—it offers the chance to help create what's next.