Nisith Sahoo

PKI engineer with hands-on experience in Public Key Infrastructure (PKI) design, implementation, and operations. Expertise in Microsoft PKI (AD CS), Entrust PKI, and enterprise certificate lifecycle management. Proven experience in developing Java-based digital signature solutions integrated with HSMs (physical, cloud, and PCI-based), PKCS#11 modules, and RESTful APIs.

Proven track record of PKI consulting with cross-functional stakeholders — translating complex cryptographic security requirements into scalable, auditable, and high-availability solutions. Strong background in PKI automation, cross-team collaboration (Ansible, ServiceNow), code signing workflows, SSL/TLS management, and compliance-driven security architecture.

Associate Consultant at HCL Technologies (2023-03 – Present)

• Architected and managed Microsoft Active Directory Certificate Services (AD CS) infrastructure including offline Root CA and multi-tier Subordinate/Issuing CA hierarchy for enterprise environments.
• Configured and maintained an in-house Certificate Lifecycle Management (CLM) tool, enabling template-based self-service certificate requests and automated expiry tracking for application owners.
• Managed trust store integrity across enterprise applications, ensuring certificate chain validation.
• Performed the scanning of TLS certificates in the AWS cloud environment using the AgileSec scan.
• Developed and maintained Java and PowerShell automation scripts invoking RESTful APIs to streamline PKI certificate issuance, renewal, and revocation workflows.
• Reduced manual code signing effort by ~75% by collaborating with Ansible and ServiceNow teams to design and automate end-to-end PKI signing pipelines.
• Led and supervised a team of 5 during a complex PKI modernization project involving the Entrust CA services & RA portals.
• Conducted PKI consulting sessions with application owners and stakeholders to align PKI integration strategies with business and compliance requirements.
• Managed Entrust PKI platform including certificate profiles, policies, lifecycle management, and template configuration.
• Applied working knowledge of HSM key management concepts (generation, storage, PKCS#11 interfacing) while integrating digital signature solutions with physical, AWS cloud, and PCI-based HSMs.

Consultant at Wipro Limited (2021-06 – 2023-03)

• Administered end-to-end certificate lifecycle management including enrollment, renewal, revocation, and expiration monitoring across enterprise PKI environments.
• Managed CRL and Delta CRL publishing to ensure high availability and proper distribution via HTTP and LDAP endpoints.
• Implemented and supported auto-enrollment policies using Group Policy Objects (GPO) across Windows enterprise environments.
• Served as a PKI consultant to application owners and project managers, conducting feasibility assessments for PKI integration to enable digital signature capabilities.
• Led & educated the team for key generation, CSR validation, and secure key handling following cryptographic best practices.
• Led the team for streamlining monthly PKI server patching and maintenance to ensure operational continuity and security hygiene.
• Researched, developed, and maintained code signing scripts to address new file extension signing requirements from application owners.

Senior Software Developer at eMudhra Limited (2017-05 – 2021-06)

• Designed and developed a Java-based digital signature application supporting both client-side and server-side signing using X.509 digital signature certificates.
• Integrated PKI signing solutions with PKCS#11 modules including software crypto-tokens, physical HSMs, Amazon Cloud HSMs, and PCI-based HSMs.
• Developed and deployed signature verification tools for signed XML mandate files compliant with NPCI standards.
• Integrated Signotec signature pad for desktop-based digital signing workflows.
• Authored comprehensive technical documentation including software design specifications, API usage guides, and feature changelogs.
• Provided deployment and implementation support to enterprise clients integrating digital signature solutions.
• Collaborated with stakeholders to define signing requirements, evaluate integration approaches, and deliver compliant PKI solutions.

System Engineer at Infosys Limited (2015-05 – 2017-04)

• Contributed to planning and fleet cluster applications responsible for trip creation, driver profile management, trip bidding, and payroll processing across multiple traffic centers.
• Maintained data accuracy for weekly business reports and supported operational application performance.
• Completed Infosys Foundation Training Program at the Mysore campus, gaining expertise in enterprise software development methodologies.

Bachelor of Technology (B.Tech) in Electronics and Communication Engineering – Institute Of Technical Education & Research, Siksha 'O' Anusandhan University (2011 – 2015)