Senior PKI Engineer — Certificate Lifecycle & HSM

EY; San Francisco (CA); Hybrid; USD 128,100 - 272,300; Full time

Benefits offered by this job

Hybrid work model

Excellent benefits

Job summary

EY in San Francisco seeks a senior PKI Engineer to design, develop, and deploy PKI services across global operations, working with AD CS, NDES, OCSP, Thales Luna HSMs and Venafi.

You’ll partner with stakeholders, document configurations and test plans, and drive automated provisioning while ensuring secure, reliable certificate management. Strong PKI knowledge and clear communication across technical and executive levels are essential.

Qualifications

• Deep understanding of digital certificate lifecycle management.
• Broad knowledge of PKI vendors and technologies.
• Knowledge of cryptographic protocols, services and standards.
• Ability to collect, refine, and analyse business requirements and develop innovative PKI solutions.
• Strong communication skills both verbal and written.

Responsibilities

• Partner with all stakeholders and external vendors to develop, deploy and support the best possible solution to meet EY business needs.
• Develop technical and functional solutions that integrate with business processes.
• Document solution installation and configuration guides and operational procedures.
• Document thorough test plans and provide detailed and summary reports of results.

Skills

PKI expertise

X.509 systems

Cryptographic protocols

Stakeholder communication

Security engineering

Education

Bachelor's degree in a technical field

Tools

AD CS

NDES

OCSP

HSM

Venafi

Intune Connector

Job description

EY in San Francisco seeks a senior PKI Engineer to design, develop, and deploy PKI services across global operations, working with AD CS, NDES, OCSP, Thales Luna HSMs and Venafi.

You’ll partner with stakeholders, document configurations and test plans, and drive automated provisioning while ensuring secure, reliable certificate management. Strong PKI knowledge and clear communication across technical and executive levels are essential.