Senior PKI Engineer | Global, Secure Certificate Solutions

EY; Alpharetta (GA); Hybrid; USD 128,100 - 239,600; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k)

Job summary

EY in the United States is seeking a senior PKI engineer to design, develop, and deploy PKI services across a large, global organization. You will work with AD CS, NDES, OCSP, Thales Luna HSMs, Venafi Trust Protection, and Intune certificate connectors to secure certificate lifecycle management.

You’ll partner with stakeholders, document procedures, and drive automation and provisioning within a secure, highly available PKI environment.

Qualifications

• Deep understanding of digital certificate lifecycle management functions and broad experience with different certificate types and uses.
• Broad understanding of the available PKI vendors and technologies offering technical solutions in the market.
• Knowledge and experience with cryptographic protocols, services, and standards.
• Ability to collect, refine, and analyse business requirements and develop innovative solutions.
• Strong communication skills both verbal and written.

Responsibilities

• Partner with all stakeholders and external vendors to develop, deploy and support the best possible solution to meet EY business needs.
• Develop technical and functional solutions that integrate with business processes.
• Document solution installation and configuration guides and operational procedures.
• Document thorough test plans and provide detailed and summary reports of results.

Skills

PKI expertise

Digital certificate lifecycle

Cryptographic protocols

Strong communication skills

Requirements gathering

Tools

Active Directory Certificate Services

NDES

OCSP

Thales Luna HSM

Venafi TrustProtection

Intune Certificate Connector

ServiceNow automation

Programming / scripting

Job description

EY in the United States is seeking a senior PKI engineer to design, develop, and deploy PKI services across a large, global organization. You will work with AD CS, NDES, OCSP, Thales Luna HSMs, Venafi Trust Protection, and Intune certificate connectors to secure certificate lifecycle management.

You’ll partner with stakeholders, document procedures, and drive automation and provisioning within a secure, highly available PKI environment.