Global PKI Architect - Lead Secure Cert Solutions (Hybrid)

EY; Secaucus (NJ); Hybrid; USD 152,700 - 294,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off

Job summary

EY is seeking a PKI Architect to design, develop, and deploy PKI services in a globally connected environment. You will work with Microsoft PKI, OCSP, HSMs, and Venafi to deliver secure identity solutions across regions.

The role requires strong analytical and consultative skills to translate business requirements into scalable PKI architectures, while aligning with EY’s security and operational standards. A hybrid work model is supported in the US.

Qualifications

• Deep understanding of digital certificate lifecycle management.
• Broad understanding of PKI vendors and technologies.
• Knowledge of cryptographic protocols and standards.
• Ability to collect and refine business requirements and develop innovative solutions.
• Strong communication skills both verbal and written.

Responsibilities

• Partner with stakeholders and vendors to design, deploy and support PKI solutions.
• Assess problems and document requirements for future state solutions.
• Design lifecycle management functions to support business needs.
• Communicate design approaches to gain stakeholder approval.
• Coordinate design activities across teams for complex projects.
• Develop solutions that integrate with business processes.

Skills

PKI design

Certificate lifecycle

Cryptographic protocols

Stakeholder communication

Consultative skills

Tools

Microsoft Active Directory Certificate Services

NDES

OCSP

Intune Certificate Connector

Thales Luna HSMs

Venafi TrustForce

Venafi Trust Authority

ServiceNow automation

Job description

EY is seeking a PKI Architect to design, develop, and deploy PKI services in a globally connected environment. You will work with Microsoft PKI, OCSP, HSMs, and Venafi to deliver secure identity solutions across regions.

The role requires strong analytical and consultative skills to translate business requirements into scalable PKI architectures, while aligning with EY’s security and operational standards. A hybrid work model is supported in the US.