Senior PKI Engineer - Secure Certificate Lifecycle & HSMs

EY; Boston (MA); Hybrid; USD 128,100 - 239,600; Full time

Benefits offered by this job

Hybrid work model

Comprehensive benefits package

Generous vacation policy

Job summary

EY seeks a Senior PKI Engineer to drive design, development, and deployment of PKI services across a global environment. You will work with AD CS, NDES, OCSP, and Venafi, delivering secure certificate management solutions and integrating with automated provisioning services.

The role emphasizes highly secure, available PKI platforms and collaboration with cross-functional teams to meet EY business needs. Hybrid work model and strong technical leadership are expected.

Qualifications

• Deep understanding of digital certificate lifecycle management and various certificate types.
• Knowledge of PKI vendors and technologies in the market.
• Familiar with cryptographic protocols, services, and standards.
• Ability to collect, refine, and analyze business requirements to develop innovative solutions.
• Strong written and verbal communication skills.

Responsibilities

• Partner with stakeholders and external vendors to develop, deploy and support PKI solutions for EY business needs.
• Develop technical and functional solutions that integrate with business processes.
• Document installation, configuration guides and operational procedures.
• Document test plans and provide detailed results reports.

Skills

PKI knowledge

Digital certificate lifecycle

Analytical thinking

Communication skills

Stakeholder collaboration

Tools

Active Directory Certificate Services

NDES

OCSP

Thales Luna HSM

Venafi Trust Protection Platform

Intune Certificate Connector

ServiceNow automation

Job description

EY seeks a Senior PKI Engineer to drive design, development, and deployment of PKI services across a global environment. You will work with AD CS, NDES, OCSP, and Venafi, delivering secure certificate management solutions and integrating with automated provisioning services.

The role emphasizes highly secure, available PKI platforms and collaboration with cross-functional teams to meet EY business needs. Hybrid work model and strong technical leadership are expected.