PKI Architect

InfiCare; Sunnyvale (CA); Hybrid; USD 152,000 - 248,000; Full time

Job summary

InfiCare is seeking a PKI Architect in Sunnyvale, CA for a hybrid contract engagement. You will design scalable PKI solutions, manage CA hierarchies, and ensure secure key management.

The role requires extensive experience in cybersecurity with PKI focus, hands-on work with PKI platforms (AD CS, Venafi, DigiCert, Entrust, Keyfactor), and HSM integration. You will lead PKI initiatives and mentor engineering teams.

Qualifications

• 12 years in cybersecurity with PKI architecture focus.
• Bachelor's or Master's degree in CS, Info Security, or related field.
• Experience with PKI platforms and HSMs.
• Ability to design scalable PKI solutions and lead PKI initiatives.

Responsibilities

• Design and architect scalable PKI solutions to support enterprise security requirements.
• Define and enforce certificate policies, key usage standards, and lifecycle management processes.
• Manage root and subordinate Certificate Authorities (CAs), including hardware security modules (HSMs).
• Ensure compliance with industry standards and regulatory requirements (e.g., NIST, ISO, GDPR).
• Collaborate with cybersecurity, infrastructure, and application teams to integrate PKI into broader security architecture.
• Conduct risk assessments and recommend improvements to PKI-related processes and technologies.
• Provide technical leadership and mentoring to engineering teams on PKI best practices.

Skills

TLS/SSL

X.509

PKI platforms

HSMs and key storage

IAM PKI integration

Education

Bachelor's or Master's degree in Computer Science / Information Security or related field

Tools

Microsoft AD CS

Venafi

DigiCert

Entrust

Keyfactor

Job description

Job Title: PKI Architect

Location: Sunnyvale, CA (Hybrid -- X days onsite)

Job Type: Contract

Experience: 12 years in cybersecurity, with at least X years focused on PKI architecture

Job Overview

Key Responsibilities

• Design and architect scalable PKI solutions to support enterprise security requirements
• Define and enforce certificate policies, key usage standards, and lifecycle management processes
• Manage root and subordinate Certificate Authorities (CAs), including hardware security modules (HSMs)
• Ensure compliance with industry standards and regulatory requirements (e.g., NIST, ISO, GDPR)
• Collaborate with cybersecurity, infrastructure, and application teams to integrate PKI into broader security architecture
• Conduct risk assessments and recommend improvements to PKI-related processes and technologies
• Provide technical leadership and mentoring to engineering teams on PKI best practices

Required Skills

• Strong understanding of cryptographic protocols: TLS/SSL, S/MIME, IPsec
• Certificate formats (X.509) and key management
• Experience with PKI platforms: Microsoft AD CS, Venafi, DigiCert, Entrust, Keyfactor
• Familiarity with HSMs, smart cards, and secure key storage solutions
• Knowledge of Identity and Access Management (IAM) and PKI integration
• Bachelor's or Master's degree in Computer Science, Information Security, or related field

Preferred Skills

• CISSP, CISM, or vendor-specific PKI certifications
• Cloud-based PKI experience: AWS Certificate Manager, Azure Key Vault
• DevSecOps practices and automation of certificate management

Location & Work Model

Sunnyvale, CA --- Hybrid (X days onsite per week)

Engagement Details

Contract engagement.