Senior PKI Engineer - Secure Certificate Lifecycle Expert

EY; Hartford (CT); Hybrid; USD 128,000 - 240,000; Full time

Benefits offered by this job

Hybrid model

Job summary

EY is seeking a Senior PKI Engineer to design, develop, and deploy PKI services across a global organization. The role focuses on secure certificate management, automation, and integration with provisioning workflows.

You will collaborate with diverse teams to deliver reliable PKI capabilities and ensure high security and availability. The ideal candidate has deep PKI knowledge, hands-on experience with AD CS, HSMs, Venafi, and certificate automation.

Qualifications

• Deep understanding of digital certificate lifecycle management and broad certificate types/use cases.
• Knowledge of PKI vendors and technologies offering technical solutions.
• Experience with cryptographic protocols, services, and standards.

Responsibilities

• Implement new or enhanced PKI services across the organization and maintain deployed solutions.
• Troubleshoot PKI-related issues and support delivery of secure certificate management.
• Document installation/configuration guides and operational procedures; develop test plans and reports.

Skills

PKI knowledge

Certificate lifecycle

Cryptographic protocols

Stakeholder communication

Automation scripting

Education

Bachelor's degree in a related field

Tools

AD CS

NDES

OCSP

Thales HSM

Venafi Trust Platform

Intune certificate connector

Job description

EY is seeking a Senior PKI Engineer to design, develop, and deploy PKI services across a global organization. The role focuses on secure certificate management, automation, and integration with provisioning workflows.

You will collaborate with diverse teams to deliver reliable PKI capabilities and ensure high security and availability. The ideal candidate has deep PKI knowledge, hands-on experience with AD CS, HSMs, Venafi, and certificate automation.