PKI Engineer — Secure Certificate Lifecycle Expert

EY; Seattle (WA); Hybrid; USD 128,100 - 239,600; Full time

Benefits offered by this job

Hybrid model

Medical and dental coverage

401(k) plans

Paid time off

Job summary

EY in Seattle seeks a Senior PKI Engineer to design, develop and deploy PKI services across EY's global platform. You’ll work with AD CS, NDES, OCSP, HSMs, Venafi, Intune certificate connectors, and automated provisioning to deliver secure certificate management solutions.

You will partner with stakeholders and vendors to implement robust PKI solutions, document configurations and test results, and help drive secure, reliable certificate lifecycle management across geographies.

Qualifications

• To qualify, deep understanding of PKI and certificate lifecycle management.
• Broad experience with PKI vendors and technologies in the market.
• Knowledge of cryptographic protocols, services, and standards.
• Ability to refine requirements and develop innovative PKI solutions.
• Strong verbal and written communication skills.

Responsibilities

• Partner with stakeholders and vendors to deploy PKI solutions meeting EY needs.
• Develop technical and functional PKI solutions integrated with processes.
• Document installation, configuration guides and procedures.
• Document comprehensive test plans and summarize results.

Skills

PKI

X.509

Cryptography

AD CS

NDES

OCSP

HSM

Venafi

Intune

Automation

Tools

Microsoft Active Directory Certificate Services

NDES

Intune Certificate Connector

Thales Luna HSM

Venafi TrustProtection Platform

Venafi Trust Authority

ServiceNow automation

Job description

EY in Seattle seeks a Senior PKI Engineer to design, develop and deploy PKI services across EY's global platform. You’ll work with AD CS, NDES, OCSP, HSMs, Venafi, Intune certificate connectors, and automated provisioning to deliver secure certificate management solutions.

You will partner with stakeholders and vendors to implement robust PKI solutions, document configurations and test results, and help drive secure, reliable certificate lifecycle management across geographies.