Technical Specialist, Public Key Infrastructure (PKI)

RBC; Vancouver; On-site; CAD 90,000 - 120,000; Full time

Job summary

A leading financial institution is seeking an experienced Public Key Infrastructure Professional to manage and enhance the PKI environment in Vancouver. The role involves overseeing all aspects of certificate management and ensuring the PKI's security and compliance. Candidates should have at least 5 years of IT experience, with deep expertise in Microsoft CA and Venafi. Strong communication and troubleshooting skills are essential, along with a robust understanding of PKI concepts and SSL/TLS protocols. Comprehensive benefits are offered, including a flexible work-life balance.

Benefits

Comprehensive Total Rewards Program

Flexible work/life balance options

World-class training program in financial services

Qualifications

• 5 years of IT experience with 3 years in PKI administration.
• Deep expertise with Microsoft CA, NDES, and Venafi.
• Excellent troubleshooting skills for complex PKI issues.
• Strong communication skills to explain technical concepts clearly.
• Deep understanding of PKI concepts and SSL/TLS protocols.

Responsibilities

• Manage the full Certificate Lifecycle including request processing and renewal.
• Ensure adherence to PKI policies and procedures.
• Administer and maintain internal Certificate Authorities.
• Identify, diagnose, and resolve certificate validity issues.
• Participate in design and implementation of new PKI solutions.
• Implement security controls to protect the PKI infrastructure.
• Ensure PKI environment meets security standards and compliance.
• Assist in secure generation and management of cryptographic keys.
• Develop scripts to automate repetitive PKI tasks.
• Document PKI processes and maintain comprehensive documentation.

Skills

Certificate Services

High Impact Communication

Power Shell Scripting

Problem Solving

Public Key Infrastructure

Security Standards

Transport Layer Security (TLS)

Tools

Microsoft CA

Venafi

NDES

OCSP

Job description

Job Description

What is the opportunity?

The Certificate Services team is seeking a skilled and experienced Public Key Infrastructure (PKI) Professional with a strong focus on Certificate Lifecycle Management to join our Global Security team in Vancouver, BC. This role is critical to maintaining the security and integrity of our digital landscape by ensuring the reliable operation and robust security of our internal and external PKI services. The successful candidate will be responsible for the day‑to‑day management, maintenance, and enhancement of our PKI environment including Venafi TPP CLM platform, Microsoft CA, NDES and CEP/CES systems. This role will have a development and application support focus, experience in application and system development required.

What will you do?

• Manage the full Certificate Lifecycle: Oversee and execute all phases of certificate management, including request processing, generation, issuance, distribution, renewal, replacement, and timely revocation of various certificate types (SSL/TLS, S/MIME, code signing, client authentication, etc.).
• Enforce PKI Policies and Procedures: Ensure strict adherence to established PKI policies, Certificate Practice Statements (CPS), and Certificate Policy (CP) documents.
• Operate and Maintain PKI Infrastructure: Administer and maintain internal Certificate Authorities (CAs), Registration Authorities (RAs), and related components, including hardware and software.
• Troubleshoot and Resolve PKI Issues: Identify, diagnose, and resolve issues related to certificate validity, trust chains, revocation status (CRL, OCSP), key usage, and connectivity problems impacting PKI services.
• Contribute to PKI Design and Implementation: Participate in the design, planning, and implementation of new PKI solutions and enhancements based on evolving business needs and security requirements.
• Ensure PKI Security: Implement and monitor security controls to protect the PKI infrastructure, including securing CA private keys, managing access controls, and monitoring for suspicious activity.
• Maintain Compliance: Ensure the PKI environment meets internal security standards, industry best practices, and relevant regulatory requirements (e.g., privacy laws, industry-specific regulations).
• Key Management: Assist in the secure generation, storage, and management of cryptographic keys involving Hardware Security Modules (HSMs).
• Automate PKI Operations: Develop and implement scripts and tools to automate repetitive PKI tasks, such as certificate issuance, monitoring, and reporting, improving efficiency and reducing manual errors.
• Document PKI Processes: Create and maintain comprehensive documentation for PKI configuration, procedures, policies, and troubleshooting guides.
• Stay Current with PKI Trends: Keep abreast of the latest developments, vulnerabilities, and best practices in the PKI and cryptographic space.

What do you need to succeed?

Must have

• 5 years of experience in Information Technology, with a minimum of 3 years focused specifically on Public Key Infrastructure (PKI) administration and support.
• Deep expertise and hands‑on experience with Microsoft CA, NDES, OCSP, and Venafi.
• Excellent troubleshooting skills and the ability to diagnose and resolve complex PKI issues.
• Strong communication skills, both written and verbal, with the ability to explain technical concepts clearly.
• Deep understanding of PKI concepts, including X.509 certificates, certificate chains, and trust anchors.
• Proficiency with SSL/TLS protocols and their application in securing web and network communications.
• Familiarity with relevant security standards and frameworks (e.g., NIST, ISO 27001) and compliance requirements.
• Experience with scripting languages (e.g., PowerShell, Python) for automating PKI‑related tasks.

Nice‑to‑have

• Certifications in Cyber Security (CISSP, CCSP, etc.).
• Understanding of industry standards (IST 27001/2, NIST, etc.).
• Venafi Certified Administrator (VSA) or Venafi Security Professional (VSP).

What’s in it for you?

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable.
• Leaders who support your development through coaching and managing opportunities.
• Ability to make a difference and lasting impact.
• Work in a dynamic, collaborative, progressive, and high‑performing team.
• A world‑class training program in financial services.
• Flexible work/life balance options.
• Opportunities to do challenging work.

Job Skills

Certificate Services, Cron Job, Detail‑Oriented, High Impact Communication, Power Shell Scripting, Problem Solving, Public Key Infrastructure, Security Standards, Transport Layer Security (TLS)

Additional Job Details

Address: 410 GEORGIA ST W, FLOOR 3:VANCOUVER

City: Vancouver

Country: Canada

Work hours/week: 37.5

Employment Type: Full time

Platform: TECHNOLOGY AND OPERATIONS

Job Type: Regular

Pay Type: Salaried

Posted Date: 2025-08-08

Application Deadline: 2026-02-20

Note: Applications will be accepted until 11:59 PM on the day prior to the application deadline date above.

Inclusion and Equal Opportunity Employment

At RBC, we believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.

Join our Talent Community

Stay in‑the‑know about great career opportunities at RBC. Sign up and get customized info on our latest jobs, career tips and recruitment events that matter to you.

Expand your limits and create a new future together at RBC. Find out how we use our passion and drive to enhance the well‑being of our clients and communities at jobs.rbc.com.

RBC is presently inviting candidates to apply for this existing vacancy. Applying to this posting allows you to express your interest in this current career opportunity at RBC. Qualified applicants may be contacted to review their resume in more detail.