Executive PKI & Cryptography Architect (Remote)

New York Life Insurance; Indiana; Hybrid; CHF 119,000 - 171,000; Full time

Benefits offered by this job

Discretionary bonus

Job summary

New York Life Insurance seeks aSenior Corporate Vice President for Enterprise PKI & cryptographic engineering to lead the architecture, engineering, and modernization of our PKI and cryptographic services across data centers and multiple cloud environments.

This hands-on builder role moves from architecture to implementation, automation, and production delivery, guiding the PKI program across the organization and ensuring cryptographic agility and post-quantum readiness.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or equivalent practical experience.
• 8+ years of hands-on PKI/cryptographic engineering and security experience in enterprise environments.
• Experience with enterprise CA environments, including Microsoft AD CS, templates, trust chains, CRLs, and OCSP.
• Strong knowledge of X.509, TLS/mTLS, certificate enrollment, revocation, and cryptographic key management.
• Experience automating certificate lifecycle with ACME, SCEP, EST, REST, PowerShell, or Python.
• Experience integrating PKI with cloud platforms and DevOps pipelines.

Responsibilities

• Design, engineer, and modernize enterprise PKI services and trust hierarchies across on-prem and cloud.
• Engineer and administer Microsoft AD CS including CA configuration and templates.
• Own Certificate Lifecycle Management from discovery to revocation and reporting.
• Build self-service certificate APIs using ACME, SCEP, EST, REST, PowerShell, and Python; integrate with ServiceNow, CI/CD, and Kubernetes.
• Engineer HSM/KMS-backed CA and signing services across on-prem and cloud environments.
• Serve as SME for PKI to governance and architecture review bodies; advise on risk remediation and controls.
• Maintain knowledge of AD and Entra ID intersecting with PKI and non-human identities.
• Drive cryptographic inventory, agility, and post-quantum readiness.

Skills

PKI engineering

Cryptographic engineering

Active Directory

Python automation

Education

Bachelor's degree in CS/IS/Security/Engineering

Tools

Microsoft AD CS

ACME/SCEP/EST

PowerShell

Python

Kubernetes

ServiceNow

Job description

New York Life Insurance seeks aSenior Corporate Vice President for Enterprise PKI & cryptographic engineering to lead the architecture, engineering, and modernization of our PKI and cryptographic services across data centers and multiple cloud environments.

This hands-on builder role moves from architecture to implementation, automation, and production delivery, guiding the PKI program across the organization and ensuring cryptographic agility and post-quantum readiness.