PKI Engineer

Job Description

Summary of the role

As a PKI Engineer, you will be responsible for the design, implementation, and continuous improvement of our global Public Key Infrastructure (PKI), supporting secure authentication, encryption, and digital trust across:

• 95,000 identities
• 2,300+ applications
• 100,000+ devices
• Hybrid environments (Active Directory & Entra ID)

You will manage the full certificate lifecycle, enforce cryptographic policies, and ensure compliance with industry standards and regulatory frameworks. This is a hands-on engineering role with strategic impact: ideal for professionals passionate about digital trust, automation, and secure identity.

• Design, implement, and maintain PKI infrastructure: CAs, RAs, HSMs.
• Ensure PKI security and scalability: Support authentication, encryption, digital signatures.
• Manage certificates: Issuance, renewal, revocation, lifecycle.
• Maintain compliance: Industry standards and regulatory requirements.
• Collaborate with teams: Integrate PKI with IAM, authentication, access control.
• Monitor and improve security: PKI policies, trust models, cryptographic practices.