Public Key Infrastructure (PKI) Digital Certificate Lifecycle Management Specialist

KeyBank • Brooklyn, OH

8d • Hybrid

About The Position

This is a Senior PKI Certificate Lifecycle Management (CLM) role within the Data Security Governance team. The team is responsible for CLM, Data Security standards and enforcement, Encryption and Encryption Keys standards and support, and Database Activity Monitoring. The role involves inventorying, monitoring, and reporting of PKI certificates, building and maintaining a PKI certificate inventory, maintaining trusted root authority signers, reviewing and approving/rejecting certificate enrollment requests, and configuring/administering certificate automation tools. The specialist will drive automation of certificate lifecycle management, collaborate with engineering teams, ensure high availability of certificate services, support corporate success metrics for certificate renewals, and audit/report non-compliant certificates. Additionally, the role provides advisory services to application teams, develops and supports PKI-related policies and documentation, manages certificate software and authority vendors, mentors junior team members, and contributes to continuous improvement initiatives and other data protection/encryption projects.

Requirements

• 10+ years of relevant IT experience.
• 5+ years of certificate lifecycle managing.
• Knowledge of relevant industry standards and best practices and the ability to effectively communicate and plan for critical industry timelines.
• Interpersonal skills.
• Ability to work independently, leading meetings with application and development teams discovering and documenting detailed requirements.
• Proven ability to plan, coordinate and implement certificate monitoring to prevent system outages.
• Proven experience working calmly and effectively in critical and time sensitive situations.
• Interpersonal skills including patient disposition that welcomes certificate owners to seek your assistance when needed and open-minded approach to recommendations that will improve the certificate lifecycle process.

Nice To Haves

• AppViewX Cert++ experience preferred.

Responsibilities

• Building and maintaining a PKI certificate inventory of different certificate types, using inputs from multiple Certificate Authorities and discovery of active certificates bound to network IPs and ports.
• Maintain trusted root authority signers.
• Review and approve/reject certificate enrollment requests.
• Configure and administer usage of certificate automation tools and platforms such as AppViewX Cert ++.
• Drive automation of certificate lifecycle management via CLM and workflow platforms.
• Collaborate with engineering and other technical teams in configuring and supporting the above tools.
• Ensure 99.99%+ availability and reliability of certificate services.
• Support meeting corporate success metrics for certificate renewals.
• Auditing, reporting and follow up of non-compliant certificates.
• Provide advisory to application teams who own and support certificates for their applications, including assisting certificate users with various levels of expertise.
• Develop and support PKI-related policies, standards, and procedures, including certificate guidance documentation that is easy to follow and convenient to access.
• Certificate software and certificate authority vendor management.
• Provide mentorship and training to junior team members.
• Provide continuous improvement ideas to reduce expenses and/or improve efficiency.
• Research, process and apply relevant information security standards.
• Contribute to technical documentation, specifications, and artifacts for certificates support.
• Potentially contribute to other initiatives within data protection and encryption space.

Benefits

• Eligibility for incentive compensation which may include production, commission, and/or discretionary incentives.
• Flexible options in circumstances where roles can be performed effectively in a mobile environment.
• Supportive teammates.
• Inclusive work environment.
• Challenging projects.
• Accessible leaders.
• Opportunities to grow in your position and your career.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed