Lead PKI Engineer

Team Impact :

FactSet is seeking a subject matter expert to drive engagement and automation. The ideal candidate is passionate about automation and cryptography and will work with development teams, infrastructure teams, and clients, to recommend a supported best practice workflow.

What You’II Do

• Administer hosted PKI certificate lifecycle management platform, ensuring full coverage of issued certificates and related installations within the platform

• Drive adoption of self-service requests, and lifecycle automation

• Work with stakeholders to understand needs, then design and lead implementation of solutions

• Participation in cryptography policy decision-making, enforcement, and roadmap

• Implement standards and enhancements as established by working groups, steering committees, governmental and regulatory bodies, as well as the CA/Browser Forum.

• Author detailed documentation with clear explanations of configuration, best practices, and procedures

• Provide escalated administrative support for systems as needed

• Participation in an on-call rotation for occasional after-hours services and support

What We’re Looking For

• 5 -12 years of relevant Public Key Infrastructure experience

• Proven experience troubleshooting and solving complex issues related to digital certificates

• Ability to identify automation opportunities based on a variety of inputs including support tickets, interaction with peers, logs, compliance initiatives, etc.

• Experience in writing technical documentation and process documentation (e.g. technical: deployment diagrams and process: flow charts for account creation)

• Thorough, detail-oriented and quality-driven with excellent communication and inter-personal skills

• Ability to multi-task and manage demands of many projects, issues, and tasks

• Ability to coordinate with peers and customers across multiple continents

• Ability to perform duties with minimal supervision

• Maintains knowledge of current and future state of cryptography initiatives such as validity period reductions, PQC.

Desired Skills:

• Experience administering private certificate authority, and related infrastructure

• Experience administering and implementing automation for certificate lifecycle management

• Experience with SPIFFE/SPIRE and/or ACME highly desired

• Intermediate experience with common scripting languages (e.g. Python, PowerShell) and designing efficient workflows

• Bachelor’s degree in computer science/engineering or related field

• Relevant industry training and/or certification

Tools and Capabilities:

• Microsoft Active Directory Certificate Services

• AWS Certificate Manager

• Venafi (CyberArk Certificate Manager)

• Hashicorp Vault PKI service

• HSM

What's In It For You

• At FactSet, our people are our greatest asset, and our culture is our biggest competitive advantage. Being a FactSetter means:

• The opportunity to join an S&P 500 company with over 45 years of sustainable growth powered by the entrepreneurial spirit of a start-up.

• Support for your total well-being. This includes health, life, and disability insurance, as well as retirement savings plans and a discounted employee stock purchase program, plus paid time off for holidays, family leave, and company-wide wellness days.

• Flexible work accommodations. We value work/life harmony and offer our employees a range of accommodations to help them achieve success both at work and in their personal lives.

• A global community dedicated to volunteerism and sustainability, where collaboration is always encouraged, and individuality drives solutions.

• Career progression planning with dedicated time each month for learning and development.

• Business Resource Groups open to all employees that serve as a catalyst for connection, growth, and belonging.

• 
  

  Salary is just one component of our compensation package and is based on several factors including but not limited to education, work experience, and certifications.