At Tata Consultancy Services, I built a production private PKI using Nokia NetGuard Certificate Manager, with a Root CA, multiple Sub-CAs, and Entrust nShield HSMs protecting the Root CA key. I administer the internal CA, which manages 300+ certificates.
I built a production KMS with Unbound Key Control and a new KMS with Thales CipherTrust Manager and Luna A750 HSMs, then migrated the customer from the legacy KMS. I support the Thales platform for 100+ applications across AWS, Azure, GCP, and Oracle Cloud.
I automate health checks, onboarding, and backup and restore with Bash scripts and CipherTrust APIs, saving 5–10 hours of manual effort per day. I’m also working on a data-centre migration, KMS geo-redundancy, and the customer’s first end-to-end Oracle Cloud integration with Thales KMS.
I lead a team of 10 providing 24/7 PKI and KMS support, and I’m the primary escalation contact for both platforms. I’ve had no customer escalations in five years.
