Summary

Overview

Work History

Education

Skills

Certification

Willing To Relocate

Technical Profile

Timeline

Open To Work

Nitish Mishra

New Delhi

Summary

Experienced PKI and encryption specialist with 7 years’ experience working with HSMs, CLM platforms (Venafi / AppViewX), automation and cloud security. Proven record of delivering PKI/CLM implementations, automating certificate lifecycles, and integrating certificate issuance into CI/CD pipelines for containerised environments. Delivered automation and discovery improvements that reduced certificate incidents and improved time‑to‑issue. Seeking senior PKI/Cloud Security roles in the UK with sponsorship.

Overview

years of professional experience

Certifications

Work History

Senior DevOps Engineer

Horizontal Integration Private Limited

Gurugram

12.2025 - Current

Lead design, operation and hardening of enterprise PKI; manage CA hierarchy, CRL/OCSP, certificate templates and CA backups; implement CP/CPS and DR/BCP processes.
Architect and implement automation to address shortened certificate lifecycles (deadline 2029), reducing manual renewals and outages via pipeline integration and automated discovery.
Build CI/CD pipelines and automation workflows using Jenkins, Ansible and Terraform; integrate certificate issuance into build/deploy pipelines.
Deployed and managed certificate distribution and secret injection for containerized workloads using Docker and Kubernetes, enhancing security posture.
Operate and integrate Thales Luna HSM and Cloud HSM for key protection and signing operations.
Implement PKI and secret management patterns in AWS and Azure; integrated Cloud HSM and IAM to ensure secure key usage.
Develop automation and operational tooling in Python, PowerShell and Bash for certificate provisioning, monitoring and incident response.

Associate Security Consultant

Tech Mahindra

06.2025 - 12.2025

Implemented PKI solutions (MS PKI, Entrust, DigiCert) and managed CA configuration updates, CRL management, and log auditing to ensure compliance.
Functioned as escalation point for Thales Luna HSM/DPOD HSM, MS PKI, Venafi, and HashiCorp Vault, effectively resolving complex issues.
Supported users in utilizing CipherTrust Manager, Venafi, AppViewX Cert+, HashiCorp Vault, and HSMs to ensure secure operations.
Automated certificate provisioning using Bash scripts on Venafi; supported SSH key management with Venafi SSH Protect and AppViewX.
Implemented CP/CPS policies, Root CA and cross-certification; supported DR and BCP planning.

PKI Consultant

Euclid Innovations

03.2024 - 05.2025

Implemented and supported seamless PKI and HSM integrations; led upgrades and facilitated customer workshops to enhance user understanding.
Managed TLS and SSH key lifecycle, ensuring secure access through discovery, inventory, rotation, retirement, and remediation.
Managed L2 incidents, service requests, and escalations for HSM, PKI, and Microsoft Defender, ensuring prompt resolution and service continuity.
Provided customer training and produced runbooks and operational documentation.

Security Analyst

HCL Technologies

04.2023 - 03.2024

Acted as escalation point for HSM, PKI, and Microsoft Defender; mentored support engineers and led field issue reviews to enhance resolution processes.
Managed L2 incidents, service requests, and problems to ensure timely restoration of affected services.
Administered PKI infrastructure: patching, backups, recovery testing and documentation.
Coordinated hotfix and patch rollouts, validating fixes in customer environments to maintain system integrity.

Security Engineer

Thales Group

11.2020 - 04.2023

Developed and implemented PKI in engineering environments using Luna HSM SA7 and Cloud HSM, enhancing security for asymmetric and symmetric ciphers, AES, and stream ciphers.
Diagnosed and resolved customer issues with Thales encryption products by interpreting logs and error messages, providing effective workarounds and fixes.
Maintained Windows and Linux systems; produced operational documentation, runbooks and troubleshooting guides.
Supported product upgrades, testing, and customer deployments, ensuring successful integration and functionality.

Engineer

PwC India

05.2019 - 06.2020

Provided L2 support for MS Intune and Teams, troubleshot Azure and Office 365 issues, provisioned VMs on Azure, and configured IAM.
Installed and configured Citrix environments, supporting Exchange and Active Directory administration.
Assisted with automation in Azure AI/ML studio and resolved incidents through effective ticketing support.

Education

B.Tech - Computer Science & Engineering

Maharishi Dayanand University

01-2018

Skills

PKI: MS PKI; Entrust; DigiCert; CA lifecycle; CRL/OCSP; CP/CPS; Root CA design; DR/BCP

CLM: Venafi; AppViewX — discovery; inventory; rotation; automated issuance

HSM & Key Management: Thales Luna HSM; DPOD; CipherTrust; Cloud HSM; PKCS#11

Automation & CI/CD: Jenkins; Ansible; Terraform; pipeline integration for certificate issuance

VCS: Bitbucket; GitLab; GitHub

Containers & Orchestration: Docker; Kubernetes — certificate injection; secret rotation

Scripting: Python; PowerShell; Bash

Cloud: AWS; Azure — Cloud HSM; IAM integration

Security tooling: HashiCorp Vault; CipherTrust Manager; Venafi SSH Protect; AppViewX Cert

Other: OpenSSL; OpenSSH; CyberArk concepts; Linux & Windows administration