PKI and Cryptography Engineering Lead

International; Lisle (IL); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Competitive market-based compensation

Comprehensive benefits package

Job summary

A leading commercial vehicle manufacturer is seeking a PKI and Cryptography Engineering Lead in Lisle, Illinois. This role includes managing the PKI team, overseeing the lifecycle of digital certificates, and ensuring compliance with industry standards. The ideal candidate will have extensive experience in Information Security, a Bachelor's degree, and strong skills in PKI technologies like Venafi and DigiCert. This position offers a competitive salary and a comprehensive benefits package designed for employee wellbeing.

Qualifications

• Must have at least 5 years of Information Security experience with at least 1 year of lead experience.
• Alternatively, Master's degree with 3 years of Information Security experience or 8 years of hands-on experience.
• Authorized to work in the United States without sponsorship. This role does not anticipate sponsorship.
• Strong PKI expertise including certificate lifecycles, policy development, and secure authentication.

Responsibilities

• Lead and manage the PKI team to ensure collaboration and performance.
• Oversee the lifecycle of digital certificates including issuance and revocation.
• Evaluate and implement certificate automation tools and platforms.
• Develop and enforce PKI policies, standards, and procedures.
• Develop and enforce certificate policies and procedures aligned with NIST/ISO/SOC 2.
• Design PKI architectures with root/subordinate CAs, OCSP, and HSM integration.
• Collaborate with security, infra, and application teams on authentication and encryption services.
• Monitor certificate-related incidents and vulnerabilities; respond effectively.
• Provide mentorship and technical guidance to team members.
• Stay updated on PKI trends, threats, and regulatory developments.

Skills

X.509 certificates

TLS/SSL

S/MIME

code signing

certificate‑based authentication

Microsoft AD CS

Venafi

DigiCert

Entrust

HSMs

key management

cryptographic protocols

communication skills

cloud management (Azure, AWS, GCP)

DevOps knowledge

compliance frameworks (NIST, ISO 27001, SOC 2)

Education

Bachelor's degree in Information Security

Master's degree in Information Security

8+ years Information Security experience

Tools

Microsoft AD CS

Venafi

DigiCert

Entrust

Azure

AWS

GCP

IaC deployments

Job description

Position Overview

We are seeking a highly skilled and security-focused PKI and Cryptography Engineering Lead to oversee our Public Key Infrastructure (PKI) team. This role is responsible for the design, implementation, and lifecycle management of digital certificates and cryptographic services across the enterprise. The ideal candidate will possess deep technical expertise in PKI, a strong understanding of cybersecurity principles, and proven leadership experience.

Responsibilities

• Lead and manage the PKI team, fostering collaboration, performance, and continuous improvement.
• Oversee the full lifecycle of digital certificates, including issuance, renewal, revocation, and auditing.
• Evaluate and implement certificate automation tools and platforms (e.g., Venafi, DigiCert, Microsoft CA); experience with Venafi is a strong advantage.
• Automate and manage certificate lifecycles for enterprise applications.
• Develop and enforce certificate policies, standards, and procedures aligned with industry best practices and compliance requirements.
• Design and maintain secure PKI architectures, including root and subordinate CAs, OCSP responders, and HSM integrations.
• Collaborate with security, infrastructure, and application teams to support secure authentication, encryption, and signing services.
• Monitor and respond to certificate-related incidents and vulnerabilities.
• Provide technical guidance and mentorship to team members.
• Stay current with emerging PKI technologies, threats, and regulatory developments.

Minimum Requirements

• Bachelor's degree and at least 5 years of Information Security experience, with at least 1 year of lead experience.
• OR Master’s degree and at least 3 years of Information Security experience, with at least 1 year of lead experience.
• OR At least 8 years of Information Security experience, with at least 1 year of lead experience.

Additional Requirements

• Qualified candidates, excluding current employees, must be legally authorized on an unrestricted basis (US Citizen, Legal Permanent Resident, Refugee or Asylee) to be employed in the United States. We do not anticipate providing employment related work sponsorship for this position (e.g., H‑1B status).

Desired Skills

• Strong knowledge of X.509 certificates, TLS/SSL, S/MIME, code signing, and certificate‑based authentication.
• Hands‑on experience with enterprise PKI tools and platforms (e.g., Microsoft AD CS, Venafi, DigiCert, Entrust) both on‑premises and cloud environments including Infrastructure as Code (IaC) deployments.
• Strong understanding of HSMs, key management, and cryptographic protocols.
• Excellent communication, documentation, and stakeholder engagement skills.
• Experience with cloud‑based PKI and certificate management in Azure, AWS, or GCP.
• Knowledge of DevOps and CI/CD integration for certificate automation.
• Understanding compliance frameworks such as NIST, ISO 27001, and SOC 2.
• Strong background in information security, particularly in authentication and privileged access management.

Benefits And Compensation

This position offers competitive market‑based compensation, along with a comprehensive benefits package designed to support employee wellbeing. The expected salary offered for this position will fall within the stated range, with the final offer based on the candidates' applicable skills, knowledge, and experience.

To learn more about the benefits offered for this position, visit https://careers.international.com/#benefits.

Company Overview

With its brands Scania, MAN, International, and Volkswagen Truck & Bus, TRATON SE is the parent and holding company of the TRATON GROUP and one of the world’s leading commercial vehicle manufacturers. The Group’s product portfolio comprises trucks, buses, and light‑duty commercial vehicles. “Transforming Transportation Together. For a sustainable world.” This intention underlines the Company’s ambition to have a lasting and sustainable impact on the commercial vehicle business and on the Group’s commercial growth.

About International

From a one‑man company built on the world‑changing invention of the McCormick reaper in 1831, to the 15,000‑person‑strong company we are today, few companies can lay claim to a history like International. Based in Lisle, Illinois, International Motors, LLC* creates solutions that deliver greater uptime and productivity to our customers throughout the full operation of our commercial vehicles. We build International® trucks and engines and IC Bus® school and commercial buses that are as tough and as smart as the people who drive them. We also develop Fleetrite® aftermarket parts. In everything we do, our vision is to accelerate the impact of sustainable mobility to create the cleaner, safer world we all deserve. As of 2021, we joined Scania, MAN and Volkswagen Truck & Bus in TRATON GROUP, a global champion of the truck and transport services industry. To learn more, visit www.International.com.

EEO Statement

We are an Equal Opportunity Employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.

If you are a qualified individual with a disability and require a reasonable accommodation to access the online application system or participate in the interview process due to your disability, please email [e-mail] to request assistance. Kindly specify Job Requisition Number / Job Title and Location in response. Otherwise, your request may not be considered.