Experienced Public Key Infrastructure Architect

Job DescriptionThe DXC Experienced PKI Engineer leads the design, architecture, and strategic implementation of Public Key Infrastructure (PKI) solutions. This role is responsible for developing secure, scalable, and compliant PKI architectures while overseeing complex troubleshooting, security risk mitigation, and integration with enterprise security frameworks.Essential Job FunctionsDesign and architect enterprise‑grade PKI solutions tailored to business security needsDefine PKI strategy and governance, ensuring compliance with industry standards and regulationsLead certificate lifecycle management strategies, including automation, scalability, and security best practicesDevelop cryptographic solutions to secure enterprise data and applicationsPerform advanced troubleshooting of PKI‑related security incidents, authentication failures, and cryptographic key management issuesGuide and mentor PKI engineers, providing expertise in deployment, security hardening, and optimizationCollaborate with security architects, IAM teams, and cloud security engineers to integrate PKI with identity management frameworksConduct risk assessments and PKI security audits, implementing corrective actions as neededResearch and evaluate emerging PKI technologies to enhance security operations and future‑proof infrastructureQualifications & SkillsBachelor’s degree in Information Assurance, Computer Science, Cybersecurity, Information Systems, or a related field, or an equivalent combination of education and experienceMinimum 5+ years of experience in an engineering role with progressively complex responsibilities, including project management, engineering remediation, and strategic planningExpertise in Public Key Infrastructure (PKI) implementation and managementStrong authentication and multi‑factor authentication (MFA) technologiesExpertise in Code Signing solutions, including management and security of code signing certificates, use of Hardware Security Modules (HSMs), and integration with DevSecOps pipelinesExpertise in cryptographic services and data protection methodologies, including design, implementation, and management of encryption solutions; strong understanding of symmetric and asymmetric encryption algorithms and key management best practicesIndustry‑recognized security certification required, such as CISSP, SSCP, CISM, SANS GSEC, ECSA, ECSP, or Security+Advanced knowledge of Microsoft PKI, OCSP, HSMs, KeyFactor, and Venafi software servicesExpertise in SSL certificate management and Microsoft Certificate Management Services and Active Directory Domain ServicesExtensive experience in PKI implementation and certificate lifecycle managementCloud‑based PKI solution development with Azure or AWS architecturesStrong understanding of digital certificate lifecycle management and PKI vendorsExperience with cryptographic protocols, services, and industry standardsAbility to gather, refine, and analyze business requirements to develop innovative security solutionsExceptional communication skills, both written and verbalStrong leadership, consultative questioning, and influence management skillsAbility to manage professional relationships, present data‑driven recommendations, and drive engineering decisions that align with business objectivesDXC is an equal opportunity employer. We welcome the many dimensions of diversity. Accommodation of special needs for qualified candidates may be considered within the framework of the DXC Accommodation Policy.In addition, DXC Technology is committed to working with and providing reasonable accommodation to qualified individuals with physical and mental disabilities. If you need assistance in filling out the employment application or require a reasonable accommodation while seeking employment, please e‑mail AODA Canada Requests. #J-18808-Ljbffr