PKI Architect - Hybrid Role with Innovative Certificates

EY; Philadelphia (Philadelphia County); Hybrid; USD 152,700 - 294,000; Full time

Benefits offered by this job

Medical and dental coverage

401(k) retirement plan

Paid time off

Job summary

EY is seeking a PKI Architect to design, develop, and deploy PKI services in a global, secure environment. The role focuses on certificate lifecycle management, vendor coordination, and driving automated provisioning.

You will influence architecture decisions and collaborate with multiple teams to deliver secure, scalable solutions. The ideal candidate has deep PKI knowledge, strong communication, and experience with vendor ecosystems and cryptographic standards.

Qualifications

• Deep understanding of digital certificate lifecycle management and broad experience with certificate types.
• Knowledge of PKI vendors and technologies offering technical solutions in the market.
• Knowledge of cryptographic protocols, services and standards.
• Ability to collect, refine, and analyse business requirements and develop innovative solutions.
• Strong communication skills both verbal and written.

Responsibilities

• Partner with stakeholders and external vendors to design, deploy and support the best possible solution.
• Assess and define problems or opportunities for improvement with documented requirements for future state solutions.
• Design innovative solutions addressing key lifecycle management functions for the business.
• Communicate design approaches and recommendations to gain stakeholder approval.
• Coordinate design activities across multiple teams and services for complex projects.
• Develop technical and functional solutions that integrate with business processes.

Skills

PKI & certificates

Security architecture

Communication

Vendor management

Education

Bachelor's degree in Computer Science/Information Security

Tools

Venafi TrustForce

Active Directory Certificate Services

Thales Luna HSMs

OCSP

ServiceNow automation

Job description

EY is seeking a PKI Architect to design, develop, and deploy PKI services in a global, secure environment. The role focuses on certificate lifecycle management, vendor coordination, and driving automated provisioning.

You will influence architecture decisions and collaborate with multiple teams to deliver secure, scalable solutions. The ideal candidate has deep PKI knowledge, strong communication, and experience with vendor ecosystems and cryptographic standards.