PKI Engineer
EY
Seattle, WA52m agovia LinkedIn
Posted 14 Nov 2026, 09:50 ET
This job at a glance
- Who can apply
- New grads, no experience needed
- Must know
- TroubleshootingStakeholder managementActive DirectoryHelp desk
- Work
- On-site in Seattle
- Pay
- Not stated by the employer.
- Skill demand
- Troubleshooting46%Stakeholder management38%Active Directory14%Help desk7%of 99 similar entry-level jobs posted in the US this week
- Listed
- Nov 14, 2026 · still open
Sign in free to see which of these skills your resume already shows.
About the Role
The PKI Engineer role drives solution development and implementation activities to provide PKI related services to the business across a large set of digital certificate use cases. This position offers the opportunity to work in a highly complex, global organization to design, develop, and deploy new or enhanced PKI services to support the business with innovative solutions within a large scale, highly available, and secure set of technologies.
Key Responsibilities
- Implement new or enhanced PKI services across the organization.
- Maintain currently deployed solutions.
- Troubleshoot PKI issues that may arise.
- Partner with stakeholders and external vendors to develop, deploy, and support solutions that meet business needs.
- Develop technical and functional solutions that integrate with business processes.
- Document solution installation and configuration guides.
- Document operational procedures.
- Document thorough test plans and provide detailed and summary reports of results.
Requirements & Tech Stack
The role requires advanced analytical acumen and solution orientation to understand the nuances of X.509 digital certificate use cases and technologies.
Core Technologies & Concepts
- Microsoft PKI
- X.509 digital certificates
- Online Certificate Status Protocol (OCSP)
- Hardware Security Modules (HSMs)
- Venafi software services
- Cryptographic protocols, services, and standards
- Identity and secure access technologies
Ideal Experience & Skills
- Deep understanding of digital certificate lifecycle management functions.
- Broad experience with different certificate types and uses.
- Broad understanding of available PKI vendors and technologies offering technical solutions.
- Ability to collect, refine, and analyze business requirements and develop innovative solutions.
- Strong communication skills, both verbal and written.
- Experience with Microsoft Active Directory Certificate Services (including Certificate Authority, NDES, OCSP, and Intune certificate connectors).
- Experience with Thales Luna Hardware Security Modules (HSMs).
- Experience with Venafi TrustForce and Trust Authority.
- Experience with automation of certificate lifecycle management functions.
- Experience with certificate request and issuance processes integrating to ServiceNow automation.
- Programming and/or script development experience.
What We Look For
- Highly motivated and performance-oriented individual.
- Ability to develop future state visions and drive measurable improvement in the delivery of PKI services.
- Ability to clearly communicate with all levels of stakeholders from technical through executive level sponsors.
- Strong technical skills.
- Team-oriented mindset.