Lead IAM Engineer (PKI)

Thomson Reuters; Canada; Hybrid; CAD 100,000 - 130,000; Full time

Job summary

A global information company seeks an experienced Lead PKI Engineer to enhance its PKI program. You will architect and implement modern PKI capabilities, ensuring secure digital identities across a global organization. The ideal candidate has extensive experience in cybersecurity and designing enterprise-grade PKI solutions, proficient in X.509 and SSL/TLS. This role also offers a hybrid work model and generous benefits.

Benefits

Hybrid Work Model

Flexible vacation

Tuition reimbursement

Mental health support

Paid volunteer days

Qualifications

• 6+ years in cybersecurity.
• Proven experience designing and deploying enterprise-grade PKI solutions.
• Strong understanding of certificate lifecycle risks and mitigation strategies.

Responsibilities

• Architect and engineer modern PKI capabilities.
• Lead the design and implementation of crypto-agile solutions.
• Analyze legacy PKI systems to identify security gaps.

Skills

Cloud-native PKI architectures

X.509

RSA

ECC

SSL/TLS

certificate lifecycle management

Education

Bachelors Degree in Computer Science or Related Field

Tools

Venafi

DigiCert

Sectigo

Job description

Overview

Lead PKI Engineer (IAM) Thomson Reuters is seeking a seasoned cybersecurity professional to lead the evolution of our PKI program—an enterprise-critical initiative driving crypto agility, certificate posture, and secure digital identity. This is a high-impact opportunity to shape the future of security architecture across a global organization. Join a dynamic, globally distributed team and collaborate with executive leadership, engineering peers, and business stakeholders to deliver scalable, resilient PKI solutions that underpin our security posture and user experience.

About You

As a Lead PKI Engineer, you will:

• Architect and engineer modern PKI capabilities, including integration with certificate/registration authorities, and lifecycle automation.
• Lead the design and implementation of crypto-agile solutions aligned with CA/Browser Forum standards and emerging PQC trends.
• Analyze legacy PKI systems to identify security gaps and drive modernization.
• Develop and enforce enterprise-wide PKI standards and integration patterns.
• Partner with architecture and infrastructure teams to align PKI strategy with business and security goals.
• Act as technical lead for PKI-related initiatives, guiding teams through design, deployment, and troubleshooting.
• Champion PKI awareness through training, documentation, and stakeholder engagement.
• Provide Tier 3/4 support for production PKI integrations and incident response.

About The Role

You are a fit for the position of Lead PKI Engineer if your background includes:

Required Skills and Experience:

• Bachelors Degree in Computer Science, Computer Engineering, or Related Field.
• 6+ years in cybersecurity.
• Proven experience designing and deploying enterprise-grade PKI solutions.
• Experience with cloud-native PKI architectures and automation frameworks.
• Strong knowledge of X.509, RSA, ECC, SSL/TLS, and certificate lifecycle management.
• Familiarity with certificate enrollment protocols (SCEP, EST, ACME).
• Strong understanding of certificate lifecycle risks and mitigation strategies.
• Ability to lead cross-functional teams and communicate complex technical concepts to diverse audiences.

Preferred Skills and Experience

• Experience with platforms such as Venafi, DigiCert and Sectigo, as well as HSM integrations.
• Awareness of post-quantum cryptography and CA/Browser Forum directions.

Why Join Us?

• Be part of a strategic security initiative with executive sponsorship.
• Work in a collaborative, globally distributed team with deep technical expertise.
• Influence enterprise-wide security architecture and standards.
• Access cutting-edge tools and participate in shaping TR’s crypto agility roadmap.

What’s in it For You?

• Hybrid Work Model: We’ve adopted a flexible hybrid working environment (2-3 days a week in the office depending on the role) for our office-based roles while delivering a seamless experience that is digitally and physically connected.
• Flexibility & Work-Life Balance: Flex My Way is a set of supportive workplace policies designed to help manage personal and professional responsibilities, whether caring for family, giving back to the community, or finding time to refresh and reset. This builds upon our flexible work arrangements, including work from anywhere for up to 8 weeks per year, empowering employees to achieve a better work-life balance.
• Career Development and Growth: By fostering a culture of continuous learning and skill development, we prepare our talent to tackle tomorrow’s challenges and deliver real-world solutions. Our Grow My Way programming and skills-first approach ensures you have the tools and knowledge to grow, lead, and thrive in an AI-enabled future.
• Industry Competitive Benefits: We offer comprehensive benefit plans to include flexible vacation, two company-wide Mental Health Days off, access to the Headspace app, retirement savings, tuition reimbursement, employee incentive programs, and resources for mental, physical, and financial wellbeing.
• Culture: Globally recognized, award-winning reputation for inclusion and belonging, flexibility, work-life balance, and more. We live by our values: Obsess over our Customers, Compete to Win, Challenge (Y)our Thinking, Act Fast / Learn Fast, and Stronger Together.
• Social Impact: Make an impact in your community with our Social Impact Institute. We offer employees two paid volunteer days off annually and opportunities to get involved with pro-bono consulting projects and ESG initiatives.
• Making a Real-World Impact: We are one of the few companies globally that helps its customers pursue justice, truth, and transparency. Together, with the professionals and institutions we serve, we help uphold the rule of law, turn the wheels of commerce, catch bad actors, report the facts, and provide trusted, unbiased information to people all over the world.

About Us

Thomson Reuters informs the way forward by bringing together the trusted content and technology that people and organizations need to make the right decisions. We serve professionals across legal, tax, accounting, compliance, government, and media. Our products combine highly specialized software and insights to empower professionals with the data, intelligence, and solutions needed to make informed decisions, and to help institutions in their pursuit of justice, truth, and transparency. Reuters, part of Thomson Reuters, is a world leading provider of trusted journalism and news.

We are powered by the talents of 26,000 employees across more than 70 countries, where everyone has a chance to contribute and grow professionally in flexible work environments. At a time when objectivity, accuracy, fairness, and transparency are under attack, we consider it our duty to pursue them. Sound exciting? Join us and help shape the industries that move society forward.

As a global business, we rely on the unique backgrounds, perspectives, and experiences of all employees to deliver on our business goals. To ensure we can do that, we seek talented, qualified employees in all our operations around the world regardless of race, color, sex/gender, including pregnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status, or any other protected classification under applicable law. Thomson Reuters is proud to be an Equal Employment Opportunity Employer providing a drug-free workplace.

We also make reasonable accommodations for qualified individuals with disabilities and for sincerely held religious beliefs in accordance with applicable law. More information on requesting an accommodation here.

Learn more on how to protect yourself from fraudulent job postings here.

More information about Thomson Reuters can be found on thomsonreuters.com.