Position Overview
The Cryptography (PKI) and Identity Security Lead is responsible for leading the organization's Public Key Infrastructure (PKI), Certificate Lifecycle Management (CLM), and cryptographic services programs. This role defines architecture standards, governance, and roadmaps for digital certificates, encryption, key management, and machine identities and manage the PKI platform. The position also provides security architecture guidance for Identity and Access Management (IAM) and data security initiatives, partnering with security, infrastructure, and application teams to strengthen the organization's digital trust and data protection capabilities. The ideal candidate will possess deep technical expertise in PKI, a strong understanding of cybersecurity and Identity security principles, and proven leadership experience.
Responsibilities
- Lead and manage the Cryptography (PKI) team, fostering a culture of collaboration, accountability, and continuous improvement.
- Own the enterprise Public Key Infrastructure (PKI) and Certificate Lifecycle Management (CLM) strategy, roadmap, standards, and operations.
- Oversee the full lifecycle of digital certificates, including issuance, renewal, revocation, discovery, inventory management, automation, and auditing.
- Drive automation of certificate and machine identity lifecycle management across enterprise applications, infrastructure, cloud services, and devices.
- Design, implement, and maintain secure enterprise and vehicle PKI architectures, including root and subordinate certification authorities (CAs), OCSP responders, CRLs, HSMs, and key management solutions.
- Establish and enforce policies, standards, procedures, and governance for digital certificates, cryptographic services, encryption, key management, and machine identities.
- Provide architecture leadership and technical guidance for Identity and Access Management (IAM) initiatives, including authentication, authorization, MFA, privileged access, federation, and identity governance.
- Partner with security, infrastructure, cloud, application, and business teams to enable secure authentication, encryption, digital signing, and data protection services.
- Develop security architecture principles, patterns, and reference architectures related to PKI, IAM, cryptography, and data security.
- Collaborate with enterprise architecture, security engineering, and operational teams to define strategic roadmaps and modernization initiatives.
- Stay current with emerging technologies, industry trends, regulatory developments, and best practices in cryptography, identity security, and cybersecurity.
- Provide technical leadership and mentorship to PKI and IAM engineers.
Minimum Requirements
- Bachelor's degree and at least 5 years of Information Security experience
- At least 1 years of lead experience
OR
- Master's degree and at least 3 years of Information Security experience
- At least 1 years of lead experience
OR
- At least 8 years of Information Security experience
- At least 1 years of lead experience
Additional Requirements
- Qualified candidates, excluding current employees, must be legally authorized on an unrestricted basis (US Citizen, Legal Permanent Resident, Refugee or Asylee) to be employed in the United States. We do not anticipate providing employment related work sponsorship for this position (e.g., H-1B status)
Desired Skills
- Experience integrating certificate lifecycle automation into DevOps, CI/CD, Kubernetes, containerized, and cloud-native environments.
- Understanding of security and compliance frameworks such as NIST, ISO 27001, CIS Controls, SOC 2, PCI DSS, and industry regulatory requirements.
- Experience with enterprise identity platforms such as Microsoft Entra ID (Azure AD), Active Directory, federation services, SSO, MFA, and modern authentication protocols.
- Familiarity with certificate discovery, inventory management, certificate risk reduction, and cryptographic posture management practices.
- Knowledge of post-quantum cryptography (PQC), cryptographic agility, and emerging industry trends.
