Head of Enterprise PKI & Cryptographic Engineering (Hybrid)

New York Life; New York (NY); Hybrid; USD 148,000 - 211,000; Full time

Job summary

New York Life is seeking a senior leader for Enterprise PKI & Cryptographic Engineering within the TDAV organization. This role will drive architecture, engineering, and modernization of PKI, certificate lifecycle, and cryptographic services across data center and cloud environments.

You will own end-to-end PKI automation, serve as SME for security governance, and guide post-quantum readiness while collaborating with IS/architecture boards and DevOps teams.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or equivalent practical experience.

Responsibilities

• Design, engineer, and modernize enterprise PKI services and trust hierarchies — offline root CAs, issuing/subordinate CAs, and cloud-native issuance — spanning users, applications, devices, workloads, APIs, and non-human identities.
• Engineer and administer Microsoft AD CS, including CA configuration, certificate templates, auto-enrollment, trust chains, CRLs, OCSP, and recovery capabilities.
• Own Certificate Lifecycle Management (CLM): drive discovery, inventory, issuance, renewal, revocation, and reporting from fragmented manual processes toward centralized, policy-driven automation.
• Build automation and reusable, self-service certificate APIs using ACME, SCEP, EST, REST, PowerShell, and Python; integrate with ServiceNow, CI/CD, Kubernetes, and DevOps tooling.
• Engineer HSM/KMS backed CA and signing services, including key ceremonies, backup, rotation, access control, and disaster recovery, across on-prem and cloud (AWS, Azure, GCP).
• Serve as the PKI and cryptographic engineering subject-matter expert for the Security Review Board and Architecture Review Board, and provide authoritative technical risk recommendations on IS Exception requests.

Skills

PKI

Cryptographic engineering

Identity engineering

Security engineering

Strong communication

Education

Bachelor's degree

Tools

Microsoft AD CS

ACME/SCEP/EST

REST/PowerShell/Python

ServiceNow

CI/CD/Kubernetes

HSM/KMS

Job description

New York Life is seeking a senior leader for Enterprise PKI & Cryptographic Engineering within the TDAV organization. This role will drive architecture, engineering, and modernization of PKI, certificate lifecycle, and cryptographic services across data center and cloud environments.

You will own end-to-end PKI automation, serve as SME for security governance, and guide post-quantum readiness while collaborating with IS/architecture boards and DevOps teams.