Cryptographic Operations PKI Architect

Citizens Financial   •  

Johnston, RI

Industry: Accounting, Finance & Insurance


11 - 15 years

Posted 37 days ago

This position will be responsible for the overall strategy, architecture and integrations for PKI - including providing subject matter expertise around PKI, Cloud and modern cryptographic protocols/constructs.

This exciting position is both strategic and tactical in nature and requires a candidate with a strong technical background and the ability to build relationships, mentor and consult at many levels.

Responsibilities include, but will not be limited to:

  • Certificate Lifecycle Management Services and infrastructure architecture and strategy
  • PKI architecture, strategy and deployment
  • Cloud PKI Services and integrations
  • Advisory and subject matter expertise
  • Creation of Certificate Practice Statement and Policy
  • Integration, validation and automation across cryptographic frameworks
  • Evaluating cryptographic tools, products and frameworks
  • Negotiating and liaising with different technology teams within the organization.


Experience and Skills:

  • 10 or more years of relevant work experience within PKI in a corporate environment
  • Solid understanding of PKI/PKCS, Certificate Authorities, and Active Directory technologies, including:
    • Microsoft PKI/CA
    • Certificate Lifecycle Management
    • Certificates, and Certificate Authorities
    • Public/Private key encryption and digital signatures
    • Solid proficiencies in the following:
    • Hashicorp Vault Certificate Authority
    • AWS Certificate Authority
    • Venafi Trust Platform
    • SoapUI, Postman, or other API testing tools
    • Linux/BASH
    • .NET development C#
    • OpenSSL
    • Kubernetes cert-manger and acme protocols
    • Proven ability to independently identify and resolve critical and complex issues through effective problem solving skills
    • Superb communication skills (written and verbal), with ability to communicate with both technical and non-technical audiences
    • Gemalto Luna PKI HSM experience preferred


  • Bachelor’s degree required

Job ID/ Req. Number190411