Job Description
**Public Key Infrastructure (PKI) Architect** leads the design, implementation, and maintenance of PKI services, certificate management, and cryptographic technologies. Responsibilities will include: * Design, implement, and maintain PKI services, including Certification Authorities (CAs) and Registration Authorities * Develop and implement orchestration and automation of enterprise certificate management * Design, implement, and maintain enterprise code signing services * Provide consulting and guidance to application teams on cryptographic technologies * Design secure vaulting solutions using Hardware Security Modules (HSM) and Key Management systems (KMS) * Support Simple Certificate Enrollment Protocol (SCEP) servers * Design, test, implement, and maintain changes in the PKI infrastructure * Interface with vendors that provide security/encryption services to the company * Lead the definition and implementation of Proof of Concepts (POCs) around PKI and other certificate-related technologies * Develop and maintain system orchestration to automate day-to-day processes * Develop and maintain ad-hoc and automated data reporting as needed using vendor tooling or custom automation as appropriate * Create and maintain documentation for technical and administrative functions * Evolve the framework for system monitoring and develop tooling to automate notifications and generate reporting/metrics * Provide guidance for scoping complex, cross-organizational projects * Develop automation approaches to solve PKI lifecycle challenges * Analyze legacy PKI solutions for security gaps and develop new approaches/capabilities to mitigate * Develop standards and approaches to enable seamless integration across technical stacks * Partner with architecture teams to understand security and business implications of PKI strategy * Act as a technical owner on initiatives involving PKI technologies * Champion PKI capability and integration across core security and IT * Develop and deploy solutions to ensure that Digital Credential Services are performing according to specifications, meet defined procedures, and comply with applicable information security policies and requirements * Integrate applications and third-party products into internal services Skills/Knowledge Desired: * Certificate Authority Administration * Certificate Enrollment Web Service & Policy Web Service * Active Directory Certificate Services (ADCS) monitoring * PKI as a service * Data-in-motion Encryption * Data-at-rest Encryption * Expertise in Public Key Infrastructure (PKI) machine identity technologies such as SSH, SSL/TLS * Familiarity with Disaster Recovery process and Business Continuity procedures * Experience in managing Key Management Systems (KMS) * Ability to design and implement solutions that optimize systems and processes * Proficiency with a scripting language such as Java, Python, or Powershell * Experience in database configuration and SQL * Experience with workflow and API development * Ability to organize and rationalize complex data sets Experience Desired: * 9+ years of experience working with PKI architecture * 9+ years of System Administration of Windows, Unix/Linux * 9+ years of experience in infrastructure (security/systems/network) engineering and/or development * 9+ years in technology and/or project management leadership positions * 9+ years experience developing executive-level reporting and communications * 9+ years experience establishing and defining the scope of new teams or functions * 9+ years experience working in large complex environments (financial services a plus)