PKI Engineer: Secure Certificate Lifecycle & HSM Specialist

EY; Philadelphia (Philadelphia County); Hybrid; USD 128,100 - 239,600; Full time

Benefits offered by this job

Hybrid work model

Total Rewards package

Job summary

EY is seeking a Senior PKI Engineer to design, develop, and deploy PKI services across a global environment. You’ll work with Active Directory Certificate Services, NDES, OCSP, Thales HSMs, Venafi, and Intune connectors to deliver secure certificate management.

You’ll partner with stakeholders and vendors to implement automated provisioning and certificate lifecycle solutions, ensuring highly available and secure services for EY’s digital ecosystem.

Qualifications

• Deep understanding of certificate lifecycle management and various certificate types.
• Knowledge of PKI vendors and market-ready technologies.
• Experience with cryptographic protocols and security standards.
• Ability to refine requirements and develop innovative PKI solutions.
• Strong verbal and written communication skills.

Responsibilities

• Partner with stakeholders and vendors to design and deploy PKI solutions.
• Develop solutions that integrate with business processes and automation.
• Document installation, configuration guides and procedures.
• Create thorough test plans and summarize results.

Skills

PKI knowledge

Digital certificates

Cryptographic protocols

Communication skills

Vendor knowledge

Education

Bachelor's degree in CS/Engineering

Tools

Venafi

HSM

Intune

NDES

OCSP

ADCS

Job description

EY is seeking a Senior PKI Engineer to design, develop, and deploy PKI services across a global environment. You’ll work with Active Directory Certificate Services, NDES, OCSP, Thales HSMs, Venafi, and Intune connectors to deliver secure certificate management.

You’ll partner with stakeholders and vendors to implement automated provisioning and certificate lifecycle solutions, ensuring highly available and secure services for EY’s digital ecosystem.