PKI Architect: Secure Identity & Automation (Hybrid)

EY; Seattle (WA); Hybrid; USD 183,300 - 334,100; Full time

Benefits offered by this job

Hybrid model

Total Rewards package

Pension/401(k)

Job summary

EY is seeking a PKI Architect to design, develop, and deploy PKI services across a global, secure environment. You will partner with stakeholders and vendors to deliver complex solutions and drive automated provisioning capabilities.

The role requires deep knowledge of X.509 lifecycle management, Microsoft PKI, HSMs, and Venafi, translating business needs into cost-effective architectures across regions. EY offers hybrid work and a comprehensive rewards package.

Qualifications

• Deep understanding of digital certificate lifecycle management and varied certificate types/use cases.
• Broad knowledge of PKI vendors and market solutions.
• Knowledge of cryptographic protocols, services, and standards.
• Ability to collect and analyze business requirements and design viable solutions.
• Strong verbal and written communication skills.

Responsibilities

• Design, develop, deploy and support PKI solutions meeting EY business needs.
• Define problems and opportunities with documented requirements and security considerations.
• Design lifecycle management functions to support business needs.
• Communicate design approaches to gain stakeholder approval.
• Coordinate design activities across multiple teams and services.
• Develop technical and functional solutions that integrate with business processes.

Skills

PKI architecture

X.509 lifecycle

OCSP

HSMs

Venafi

Vendor evaluation

Scripting

Tools

Microsoft Active Directory Certificate Services

Thales Luna HSM

Venafi TrustForce

Intune Certificate Connector

ServiceNow integration

Job description

EY is seeking a PKI Architect to design, develop, and deploy PKI services across a global, secure environment. You will partner with stakeholders and vendors to deliver complex solutions and drive automated provisioning capabilities.

The role requires deep knowledge of X.509 lifecycle management, Microsoft PKI, HSMs, and Venafi, translating business needs into cost-effective architectures across regions. EY offers hybrid work and a comprehensive rewards package.