Sateesh Thandlam

WORK HISTORY

EDUCATION

SKILLS

ABOUT SATEESH THANDLAM

I am a seasoned PKI and IAM professional with around 11 years of extensive experience in planning, designing, and implementing robust Public Key Infrastructure (PKI) and Identity and Access Management (IAM) for large enterprises. My core expertise lies in architecting and deploying Microsoft PKI (ADCS) environments for issuing a wide range of certificates including Client Authentication, Server Authentication, S/MIME, Code Signing, and TLS/SSL. I’ve also led the implementation of Managed PKI solutions from external vendors to meet urgent business requirements with speed and compliance.In addition to traditional PKI, I specialize in automating certificate lifecycle management using Keyfactor Command, which includes features like auto-renewal, TLS scanning, monitoring, CRL checks, dashboard reporting, and custom workflows. I\'ve successfully integrated Thales Luna Cloud HSM (Data Protection on Demand) to secure cryptographic keys for root and issuing CAs, and deployed Intune PFX Connector profiles for seamless certificate enrollment on mobile and desktop devices. My experience also includes deploying Thales CipherTrust Cloud Key Manager to manage encryption keys for Azure applications using DPoD as the root of trust.I regularly collaborate with external CAs to stay aligned with CA/B Forum guidelines and industry standards. I’ve authored Certificate Policy (CP) and Certificate Practice Statement (CPS) documents to support strong governance. My broader IAM expertise includes technologies such as ForgeRock Access Management, PingFederate, CA SSO, CA Federation, and ADFS. With a solid foundation in ITIL and strong operational experience across incident, change, and problem management, I also configure tools like Nagios to proactively monitor and alert on service health. Passionate about cybersecurity and cryptographic technologies, I am always looking to stay ahead of evolving security standards and best practices.