Senior PKI Architect: Secure Identity Solutions

EY; City of Rochester (NY); Hybrid; USD 183,300 - 334,100; Full time

Job summary

EY is seeking a senior PKI Architect to design, develop, and deploy PKI services across a global, secure environment. You will work with Microsoft PKI technologies (AD CS, NDES, OCSP), Thales Luna HSMs, and Venafi to deliver robust certificate lifecycle solutions that support business needs.

The role requires deep PKI expertise, strong analytical and communication skills, and the ability to collaborate with diverse teams and external vendors to drive measurable improvements in delivery.

Qualifications

• Deep understanding of digital certificate lifecycle management and broad experience with different certificate types and uses.
• Broad understanding of PKI vendors and technologies offering technical solutions in the market.
• Knowledge of cryptographic protocols, services, and standards.
• Ability to collect, refine, and analyse business requirements and develop innovative solutions.
• Strong communication skills both verbal and written.

Responsibilities

• Partner with stakeholders and external vendors to design, deploy, and support solutions meeting EY business needs.
• Define problems or opportunities and provide requirements for future state solutions.
• Design innovative solutions for key lifecycle management functions.
• Communicate design approaches to gain stakeholder approval.
• Coordinate design activities across teams to complete complex projects.
• Develop technical and functional solutions that integrate with business processes.

Skills

PKI expertise

Active Directory

HSMs

Venafi

Automation scripting

Tools

Microsoft AD CS

NDES

OCSP

Thales Luna HSM

Venafi TrustProtection

Intune Certificate Connector

Job description

EY is seeking a senior PKI Architect to design, develop, and deploy PKI services across a global, secure environment. You will work with Microsoft PKI technologies (AD CS, NDES, OCSP), Thales Luna HSMs, and Venafi to deliver robust certificate lifecycle solutions that support business needs.

The role requires deep PKI expertise, strong analytical and communication skills, and the ability to collaborate with diverse teams and external vendors to drive measurable improvements in delivery.