PKI Security Architect & Governance Specialist

Responsibilities

• Develop a comprehensive security strategy and design a future‑proof security architecture for mission‑critical PKI infrastructures.
• Lead and oversee the strategic transition of PKI infrastructure to Post‑Quantum Cryptography (PQC), ensuring cryptographic agility while maintaining robust security requirements and controls.
• Establish and uphold a strong
  PKI governance framework
  , implementing detailed policies, practices and procedures. Supervise root key ceremonies and other critical CA processes, define resilient incident response and recovery procedures, and develop and maintain certificate policies and practice statements, and other essential documentation.
• Ensure ongoing compliance with relevant regulations and industry standards
  , support audit reviews and risk assessments, and proactively monitor the evolving threat and regulatory landscape.
• Serve as a subject matter expert on PKI security, governance, and compliance
  . Provide authoritative guidance and keep the organization abreast of latest trends, technologies, and industry best practices.
• Manage stakeholders and collaborate closely with IT and Operations teams responsible for deploying and operating the PKI infrastructures to ensure alignment with security and governance requirements.

• Master’s degree in information technology, computer science, cybersecurity, or a closely related discipline.
• Robust background in cybersecurity, with at least 15 years of professional experience
  in PKI security architecture and governance
  , and a proven track record supporting mission‑critical infrastructures.
• Extensive experience in developing, implementing, and overseeing comprehensive
  PKI governance frameworks, policies and processes
  , and related documentation.
• Expert‑level PKI knowledge and demonstrated experience with Certification Authorities, X.509 digital certificates, certificate lifecycle management, certificate revocation lists, key management, hardware security modules, digital signatures, non‑repudiation, and associated technologies.
• Thorough understanding and practical application of industry regulations and compliance standards relevant to PKI.
• Proficient in both classic and post‑quantum cryptography (PQC), including asymmetric algorithms and related cryptographic protocols and standards.
• Excellent written and verbal communication skills, capable of clearly conveying complex technical concepts to non‑specialists and senior stakeholders.
• Demonstrated drive, dynamism, and strong results orientation, with a proven ability to manage high‑stakes, mission‑critical projects effectively.