Lead PKI Engineer

FactSet is seeking a subject matter expert to drive engagement and automation. The ideal candidate is passionate about automation and cryptography and will work with development teams, infrastructure teams, and clients, to recommend a supported best practice workflow.

What You II Do

• Administer hosted PKI certificate lifecycle management platform, ensuring full coverage of issued certificates and related installations within the platform

• Drive adoption of self-service requests, and lifecycle automation

• Work with stakeholders to understand needs, then design and lead implementation of solutions

• Participation in cryptography policy decision-making, enforcement, and roadmap

• Implement standards and enhancements as established by working groups, steering committees, governmental and regulatory bodies, as well as the CA/Browser Forum.

• Author detailed documentation with clear explanations of configuration, best practices, and procedures

• Provide escalated administrative support for systems as needed

• Participation in an on-call rotation for occasional after-hours services and support

What We re Looking For

• 5 -12 years of relevant Public Key Infrastructure experience

• Proven experience troubleshooting and solving complex issues related to digital certificates

• Ability to identify automation opportunities based on a variety of inputs including support tickets, interaction with peers, logs, compliance initiatives, etc.

• Experience in writing technical documentation and process documentation (e.g. technical: deployment diagrams and process: flow charts for account creation)

• Thorough, detail-oriented and quality-driven with excellent communication and inter-personal skills

• Ability to multi-task and manage demands of many projects, issues, and tasks

• Ability to coordinate with peers and customers across multiple continents

• Ability to perform duties with minimal supervision

• Maintains knowledge of current and future state of cryptography initiatives such as validity period reductions, PQC.

Desired Skills:

• Experience administering private certificate authority, and related infrastructure

• Experience administering and implementing automation for certificate lifecycle management

• Experience with SPIFFE/SPIRE and/or ACME highly desired

• Intermediate experience with common scripting languages (e.g. Python, PowerShell) and designing efficient workflows

• Bachelor s degree in computer science/engineering or related field

• Relevant industry training and/or certification

Tools and Capabilities:

• Microsoft Active Directory Certificate Services

• AWS Certificate Manager

• Venafi (CyberArk Certificate Manager)

• Hashicorp Vault PKI service

• HSM