Senior PKI Engineer: Secure Certificate Solutions

EY; Washington (District of Columbia); Hybrid; USD 128,100 - 239,600; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

401(k) plan

Paid time off

Job summary

EY is seeking a Senior PKI Engineer in the United States to design, develop, and deploy PKI services across a global, highly secure environment. The role involves working with technologies like Active Directory Certificate Services, NDES, OCSP, Thales Luna HSMs, and Venafi platforms to deliver scalable certificate management solutions.

The successful candidate will join EY's hybrid team model, collaborating with diverse teams to drive secure, reliable PKI delivery and automation, including

Qualifications

• Deep understanding of digital certificate lifecycle management and diverse certificate types.
• Broad knowledge of PKI vendors and technologies offering technical solutions.
• Experience with cryptographic protocols, services, and standards.
• Ability to refine and analyze business requirements and develop innovative solutions.
• Strong verbal and written communication skills.

Responsibilities

• Partner with stakeholders and vendors to deploy PKI solutions that meet EY needs.
• Develop technical and functional PKI solutions integrated with business processes.
• Document installation guides, configurations, and operational procedures.
• Prepare thorough test plans and summarize results.

Skills

PKI engineering

Certificate lifecycle

Analytical thinking

Communication

Collaboration

Tools

AD CS

NDES

OCSP

Thales HSM

Venafi

Intune Connector

ServiceNow

Job description

EY is seeking a Senior PKI Engineer in the United States to design, develop, and deploy PKI services across a global, highly secure environment. The role involves working with technologies like Active Directory Certificate Services, NDES, OCSP, Thales Luna HSMs, and Venafi platforms to deliver scalable certificate management solutions.

The successful candidate will join EY's hybrid team model, collaborating with diverse teams to drive secure, reliable PKI delivery and automation, including