Saurav Keshari
Pune
Summary
Dynamic Senior Analyst at Deutsche Bank AG with expertise in PKI and cryptography implementation. Proven track record in managing digital certificate lifecycles and executing secure key migrations. Adept at troubleshooting complex issues, ensuring seamless client onboarding, and enhancing data security through innovative solutions. Strong collaboration skills drive successful project outcomes.
Overview
5
5
years of professional experience
1
1
Certification
Work History
Senior Analyst
Deutsche Bank AG
Pune
09.2024 - Current
- Working as a Cryptography Engineer in Key management Services (KMS), responsible for key generation and onboarding to db KeyProtect.
- Collaborating with application teams to understand cryptographic use cases and recommending appropriate key types and configurations.
- Executed HSM replacement activity by migrating from existing HSM to new HSM.
- Led the setup of new CSG servers, pushing all keys from the existing server. Including secure migration of keys using Utimaco HSM.
- Assisted clients using JCA based application setups in implementing secure cryptographic operations.
- Troubleshoot client setup issues by analyzing logs via PuTTY and proving timely resolution.
- Managed client onboarding for multiple environments including DEV, UAT, CONUAT and PROD.
Associate Consultant
Infosys Ltd.
Pune
06.2022 - 08.2024
- Implemented 2-tier hierarchy of Microsoft PKI and AWS Private CA for issuance of all on- premises Private SSL certificates. Creation of CSR files into Windows and Linux servers.
- Configured and managed CA, certificate template and CRLs.
- Prepared HLD/LLD Architecture Diagram and Document for MS PKI onprem deployment and AWS Private CA implementation.
- Issuance, renewal, and revocation of digital certificates using Venafi.
- Prepared Roadmap, SOP, PPT, Excel regarding implemenation.
- Issuance of external certificates using Entrust Portal and Private SSL certificates via Netrust.
- Handling of incidents & requests for Private and External SSL certificates.
Project Engineer
Wipro Technologies
Pune
05.2020 - 07.2022
- Management of the lifecycle of digital certificates which includes issuance, re-issuance, revocation and renewal of the certificates.
- Issuance of personal certificates like VPN, Document signing, S/MIME and RAP and server certificate like Single multi domain, wildcard and EV and code signing cert.
- Installation, Configuration and Troubleshooting of certificate related issues.
Education
B.Tech - Electronic Engineering
Kalinga Institute of Industrial Technology
Bhubaneswar 04-2020
Skills
- PKI
- Data Security
- SSH
- Crypto Operations
- Cryptography implementation
- KMS (Key Management System)
- PKI solution implementation
- AWS Private CA
- MS PKI
- Encryption
- Digital Certificates
- Certificate lifecycle management
- Secure application integration
- Cloud security solutions
- Troubleshooting of certificate issues
Certification
- Microsoft AZ-900
Worked on tools below
- ServiceNow/Surf+
- CSG/CKMS
- Venafi
- Netrust/Entrust
- Keyon
- Digicert
- CCRT/CIT
Education and Training
other
Timeline
Senior Analyst
Deutsche Bank AG
09.2024 - Current
Associate Consultant
Infosys Ltd.
06.2022 - 08.2024
Project Engineer
Wipro Technologies
05.2020 - 07.2022
B.Tech - Electronic Engineering
Kalinga Institute of Industrial Technology