Position OverviewWe are seeking a highly skilled and security-focused PKI Certificate Management Lead to oversee our Public Key Infrastructure (PKI) team.
This role is responsible for the design, implementation, and lifecycle management of digital certificates and cryptographic services across the enterprise.
The ideal candidate will possess deep technical expertise in PKI, a strong understanding of cybersecurity principles, and proven leadership experience.
Responsibilities
- Lead and manage the PKI team, fostering collaboration, performance, and continuous improvement.
- Oversee the full lifecycle of digital certificates, including issuance, renewal, revocation, and auditing.
- Evaluate and implement certificate automation tools and platforms (e.g., Venafi, DigiCert, Microsoft CA); experience with Venafi is a strong advantage.
- Automate and manage certificate lifecycles for enterprise applications.
- Develop and enforce certificate policies, standards, and procedures aligned with industry best practices and compliance requirements.
- Design and maintain secure PKI architectures, including root and subordinate CAs, OCSP responders, and HSM integrations.
- Collaborate with security, infrastructure, and application teams to support secure authentication, encryption, and signing services.
- Monitor and respond to certificate-related incidents and vulnerabilities.
- Provide technical guidance and mentorship to team members.
- Stay current with emerging PKI technologies, threats, and regulatory developments
Minimum Requirements
- Bachelor's degree and at least 5 years of Information Security experience
- At least 1 years of lead experience
OR
- Master's degree and at least 3 years of Information Security experience
- At least 1 years of lead experience
OR
- At least 8 years of Information Security experience
- At least 1 years of lead experience
Additional Requirements
- Qualified candidates, excluding current employees, must be legally authorized on an unrestricted basis (US Citizen, Legal Permanent Resident, Refugee or Asylee) to be employed in the United States. We do not anticipate providing employment related work sponsorship for this position (e.g., H-1B status)
Desired Skills
- Strong knowledge of X.509 certificates, TLS/SSL, S/MIME, code signing, and certificate-based authentication.
- Hands-on experience with enterprise PKI tools and platforms (e.g., Microsoft AD CS, Venafi, DigiCert, Entrust) both on-premises and cloud environments including Infrastructure as Code (IaC) deployments.
- Strong understanding about HSMs, key management, and cryptographic protocols.
- Excellent communication, documentation, and stakeholder engagement skills.
- Experience with cloud-based PKI and certificate management in Azure, AWS, or GCP.
- Knowledge of DevOps and CI/CD integration for certificate automation.
- Understanding compliance frameworks such as NIST, ISO 27001, and SOC 2.
- Strong background in information security, particularly in authentication and privileged access management.
Benefits and Compensation
We provide a competitive total rewards package which ensures job satisfaction both on and off the job. We offer market-based compensation, health benefits, 401(k) match, tuition assistance, EAP, legal insurance, an employee discount program, and more.
For this position, the expected salary range will be commensurate with the candidate’s applicable skills, knowledge and experience.
You can learn more about our comprehensive benefits package at https://careers.international.com/#benefits.
