Senior PKI Engineer: Architecting Secure Certificate Lifecycles

EY; Cleveland (OH); Hybrid; USD 128,100 - 239,600; Full time

Benefits offered by this job

Hybrid work model

Total Rewards package

Job summary

EY in the United States is seeking a Senior PKI Engineer to design, develop, and deploy PKI services across a global, security‑driven environment. You’ll work with AD CS, NDES, OCSP, HSMs, Venafi, and Intune certificate connectors to deliver secure certificate management and automation.

Join EY to contribute to high‑impact projects, partner with stakeholders and vendors, and help shape scalable PKI solutions while advancing your expertise in cryptographic technologies and enterprise identity

Qualifications

• Deep understanding of digital certificate lifecycle management and various certificate types.
• Experience with PKI vendors and technologies delivering technical solutions.
• Knowledge of cryptographic protocols, services, and standards.
• Ability to gather, refine, and analyze business requirements to develop innovative solutions.
• Strong communication skills, both written and verbal.

Responsibilities

• Partner with stakeholders and vendors to develop, deploy, and support PKI solutions.
• Develop technical and functional PKI solutions that integrate with business processes.
• Document installation, configuration guides and operational procedures.
• Document thorough test plans and summarize results.

Skills

PKI engineering

Digital certificates

AD CS & NDES

Venafi & HSM

Tools

Thales Luna HSM

Venafi TrustPlatform

Intune Certificate Connector

Job description

EY in the United States is seeking a Senior PKI Engineer to design, develop, and deploy PKI services across a global, security‑driven environment. You’ll work with AD CS, NDES, OCSP, HSMs, Venafi, and Intune certificate connectors to deliver secure certificate management and automation.

Join EY to contribute to high‑impact projects, partner with stakeholders and vendors, and help shape scalable PKI solutions while advancing your expertise in cryptographic technologies and enterprise identity