Senior PKI Architect - Secure Identity & HSM Solutions

EY; Alpharetta (GA); Hybrid; USD 152,700 - 294,000; Full time

Benefits offered by this job

Hybrid work model

Competitive compensation package

Paid time off

Job summary

EY in the United States is seeking a senior PKI architect to design, develop, and deploy secure PKI services across a global enterprise. The role focuses on complex certificate lifecycle management, AD CS, NDES, OCSP, and HSM integrations to support trusted identities.

You will partner with stakeholders, adapt to evolving business needs, and guide automation and migration initiatives, while ensuring security and reliability across regions.

Qualifications

• Deep understanding of digital certificate lifecycle management and broad experience with different certificate types and uses.
• Broad understanding of PKI vendors and technologies offering technical solutions.
• Knowledge of cryptographic protocols, services, and standards.
• Ability to collect, refine, and analyse business requirements and develop innovative solutions.
• Strong verbal and written communication skills.

Responsibilities

• Partner with all stakeholders and external vendors to design, develop, deploy and support the best possible solution to meet EY business needs.
• Assess and define problems or opportunities for improvement by providing documented business, functional, operational, and security requirements to be addressed by future state solutions
• Design innovative solutions that address key lifecycle management functions to support the needs of the business
• Communicate design approaches and recommendations to gain stakeholder approval and agreement
• Coordinate design activities across multiple teams and services to ensure successful completion of complex projects
• Develop technical and functional solutions that integrate with business processes

Skills

PKI fundamentals

Active Directory Certificate Services

NDES

OCSP

HSM

Venafi

Intune certificate connector

Certificate lifecycle management

Automation

Programming/scripting

Communication skills

Tools

Venafi Trust Protection Platform

Thales Luna HSM

Intune Certificate Connector

ServiceNow automation

Job description

EY in the United States is seeking a senior PKI architect to design, develop, and deploy secure PKI services across a global enterprise. The role focuses on complex certificate lifecycle management, AD CS, NDES, OCSP, and HSM integrations to support trusted identities.

You will partner with stakeholders, adapt to evolving business needs, and guide automation and migration initiatives, while ensuring security and reliability across regions.