Product Manager, Public Trust & PKI

ASSA ABLOY • Salt Lake, UT

2d

About The Position

The Product Manager, Public Trust & PKI oversees the organization’s Public Trust Certificate Program, ensuring compliance with CA/Browser Forum and other compliance standards. This role involves managing CA root certificates, conducting requirement analysis, and updating Certificate Policies and collaborating with other stakeholders to implement adherence to different standards. The Product Manager serves as the IdenTrust representative in the CA/Browser Forum and other standard bodies, collaborates with internal and external stakeholders, and ensures compatibility with operating systems requirements for public trust such as Microsoft, Google, and Apple.

HID powers the trusted identities of the world’s people, places, and things, allowing people to transact safely, work productively and travel freely. We are a high-tech software company headquartered in Austin, TX, with over 4,500 worldwide employees.

HID Global IAM products protect more than 85 million user identities. At HID Global, we understand that no person, device, or workplace can go unprotected. This philosophy of Zero Trust drives us to create new advances in risk-based multi-factor authentication, leads us to secure user identities in converged access environments and drives the need to expand implementations with our industry-leading digital certificates and PKIaaS solution to manage them at scale.

As our Product Manager, Public Trust & PKI, you’ll support HID’s success by: Overseeing the Public Trust Certificate Program, ensuring full compliance with CA/Browser Forum baseline requirements (Server, S/MIME, Code Signing, Network Security, etc.). Serving as the primary point of contact and accountable owner for all matters related to public trust certificates. Managing CA root certificates, including embedding and lifecycle management across browsers and internet software platforms (e.g., Microsoft, Google, Apple). Creating, maintaining, and governing Certificate Policy (CP) and Certificate Practice Statements (CPS) for all public trust certificate programs. Representing IdenTrust as a member in the CA/Browser Forum and other relevant regulatory or standards bodies. Owning incident management end to end, including root ‑ cause analysis, cross ‑ functional coordination, response drafting, stakeholder review and approval, tracking through closure, and execution of corrective actions. Working closely with the Compliance team to ensure successful completion of audits such as WebTrust and SOC 2. Identifying, assessing, and mitigating risks associated with the issuance and management of public trust certificates. Ensuring internal processes, systems, and controls align with regulatory and industry requirements through close collaboration with Registration, PKI, SysOps, Delivery, and Compliance teams. Conducting requirements analysis and defining specifications for new certificate programs, roots, issuing CAs, and end ‑ entity certificates. Collaborating with engineering teams to translate regulatory and business requirements into product stories, technical designs, and data/process flows. Documenting and mapping public trust policy requirements to internal business operations, registration workflows, and certificate platform processes. Collaborating with customers and customer delivery teams to adjust certificate profiles and policies based on specific use cases. Promoting awareness of CA/Browser Forum ballots, discussions, and evolving compliance requirements across internal stakeholders. Staying informed on industry trends, emerging technologies, and changes in regulatory and standards requirements impacting public trust. Leading initiatives to improve the efficiency, effectiveness, and scalability of the public trust certificate program.

Requirements

• Experience within Public Key Infrastructure (PKI) or Cryptography and working with standard regulatory bodies such as CA/Browser Forum.
• In-depth knowledge of CA/Browser Forum guidelines and baseline requirements.
• Comfortable with dynamic and changing markets requiring continual assessment and adjustment and sometimes pivoting to achieve business objectives.
• Strong leadership and project management skills.
• Experience working in global teams and matrix organizations.
• Strong analytical and problem-solving abilities with customer service attitude.
• Ability to work collaboratively with diverse teams and stakeholders to achieve results.
• Bachelor’s degree in computer science, Information Technology, Cybersecurity or related field. Candidates with equivalent education, plus relevant work experience, may also be considered.
• 8+ years of experience IT security, certificate management, or a related field.
• Proven track record of managing public trust certificate programs and ensuring compliance with industry standards.

Nice To Haves

• Relevant certifications such as CISSP, CISM is a plus.
• Experience in Scaled Agile Framework (SAFe®) or Scrum Agile is a plus.

Responsibilities

• Overseeing the Public Trust Certificate Program, ensuring full compliance with CA/Browser Forum baseline requirements (Server, S/MIME, Code Signing, Network Security, etc.).
• Serving as the primary point of contact and accountable owner for all matters related to public trust certificates.
• Managing CA root certificates, including embedding and lifecycle management across browsers and internet software platforms (e.g., Microsoft, Google, Apple).
• Creating, maintaining, and governing Certificate Policy (CP) and Certificate Practice Statements (CPS) for all public trust certificate programs.
• Representing IdenTrust as a member in the CA/Browser Forum and other relevant regulatory or standards bodies.
• Owning incident management end to end, including root ‑ cause analysis, cross ‑ functional coordination, response drafting, stakeholder review and approval, tracking through closure, and execution of corrective actions.
• Working closely with the Compliance team to ensure successful completion of audits such as WebTrust and SOC 2.
• Identifying, assessing, and mitigating risks associated with the issuance and management of public trust certificates.
• Ensuring internal processes, systems, and controls align with regulatory and industry requirements through close collaboration with Registration, PKI, SysOps, Delivery, and Compliance teams.
• Conducting requirements analysis and defining specifications for new certificate programs, roots, issuing CAs, and end ‑ entity certificates.
• Collaborating with engineering teams to translate regulatory and business requirements into product stories, technical designs, and data/process flows.
• Documenting and mapping public trust policy requirements to internal business operations, registration workflows, and certificate platform processes.
• Collaborating with customers and customer delivery teams to adjust certificate profiles and policies based on specific use cases.
• Promoting awareness of CA/Browser Forum ballots, discussions, and evolving compliance requirements across internal stakeholders.
• Staying informed on industry trends, emerging technologies, and changes in regulatory and standards requirements impacting public trust.
• Leading initiatives to improve the efficiency, effectiveness, and scalability of the public trust certificate program.

Benefits

• Competitive salary and rewards package
• Competitive benefits and annual leave offering, allowing for work-life balance
• A vibrant, welcoming & inclusive culture
• Extensive career development opportunities and resources to maximize your potential

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level