Senior PKI Engineer — Hybrid Role, Global Impact & HSM

EY; Phoenix (AZ); Hybrid; USD 128,000 - 240,000; Full time

Benefits offered by this job

Hybrid work model

Medical & dental coverage

Pension and 401(k)

Paid time off

Job summary

EY is seeking a PKI engineer to design, develop, and deploy PKI services across a global organization. You will work with AD CS, NDES, OCSP, HSMs, Venafi, and Intune certificate connectors to deliver secure certificate solutions.

You will collaborate with stakeholders to implement scalable PKI services, document guides and test plans, and operate within a high-security environment. The role offers a hybrid US-based setup and competitive compensation.

Qualifications

• Deep understanding of digital certificate lifecycle management and types.
• Knowledge of PKI vendors and market solutions.
• Experience with cryptographic protocols, services, and standards.
• Ability to refine requirements and develop innovative PKI solutions.
• Strong written and verbal communication skills.

Responsibilities

• Implement new or enhanced PKI services across the organization.
• Maintain currently deployed PKI solutions and troubleshoot issues.
• Document installation, configuration guides and operational procedures.
• Document test plans and summarize results.

Skills

PKI

Digital Certificates

Cryptographic Protocols

Vendor Knowledge

Automation

Education

Bachelor’s degree in a relevant field

Tools

AD CS

NDES

OCSP

Venafi

Intune

HSM

Job description

EY is seeking a PKI engineer to design, develop, and deploy PKI services across a global organization. You will work with AD CS, NDES, OCSP, HSMs, Venafi, and Intune certificate connectors to deliver secure certificate solutions.

You will collaborate with stakeholders to implement scalable PKI services, document guides and test plans, and operate within a high-security environment. The role offers a hybrid US-based setup and competitive compensation.