Senior PKI Architect

Job Title: ( Senior PKI Architect )

About Kyyba:

Founded in 1998 and headquartered in Farmington Hills, MI, Kyyba has a global presence delivering high-quality resources and top-notch recruiting services, enabling businesses to effectively respond to organizational changes and technological advances.

At Kyyba, the overall well-being of our employees and their families is important to us. We are proud of our work culture which embodies our core values; incorporating value, passion, excellence, empowerment, and happiness, creates a vibrant and productive atmosphere. We empower our employees with the resources, incentives, and flexibility that they need to support a healthy, balanced, and fulfilling career by providing many valuable benefits and a balanced compensation structure combined with career development.

Job Description:

Roles and Responsibilities: This role leads the architecture, design, implementation, and management of enterprise-level Public Key Infrastructure (PKI) solutions, ensuring high availability, scalability, and security across global Clien Group locations. Drives strategic PKI initiatives, including the adoption of new technologies and best practices.

· Architects and deploys Microsoft Active Directory Certificate Services (AD CS) components, including Certificate Authorities (CAs), Online Responders (OCSP), Certificate Revocation Lists (CRLs) and Network Device Enrollment Service (NDES).

· Manages the full certificate lifecycle using advanced Certificate Lifecycle Management (CLM) platforms and Hardware Security Modules (HSMs).

· Develops and implements automation scripts (PowerShell, Python) for PKI operations, certificate issuance, revocation, and monitoring.

· Implements proof of concepts for PKI solutions.

· Provides expert-level (Tier 3) support for complex PKI and Certificate Management incidents, performing root cause analysis and implementing permanent solutions.

· Collaborates with cross-functional teams, including Product Owners, DevOps, and IT Security, to integrate PKI solutions into various applications and services.

· Contributes to the overall security architecture, providing expert guidance on cryptographic standards, key management, and secure communication protocols.

· Conducts comprehensive risk assessments for PKI deployments and develop mitigation strategies to ensure compliance with industry regulations and internal security policies.

· Creates and maintains high-quality technical documentation, including design specifications, operational procedures, and test plans.

· Conducts research on existing systems and devise solutions that work within those systems.

· Responds to questions regarding PKI and Certificate Management capabilities and requirements.

· Maintains a high-level understanding of the organization's IT-Security processes and requirements.

· Works on the delivery of DevOps User Stories within specified functional area(s).

· Supports the roll-out and operation of global Public Key Infrastructure (PKI) and Certificate Management initiatives within the Client Group for multiple departments and all Client global locations.

· Understands and models VPS (Value Added Production System) Principles and concepts of Standard Work and Problem Solving.

· Adheres to 5S and Safety Standards and Principles. Performs other duties as assigned by Client Group Operations Supervisor.

Experience and Education: Bachelor's or Master's degree in Computer Science, Information Security, or a related technical field.

· Currently application is On-Premise but will be moving to Cloud in the future in Azure.

· Must have one of these Licenses and/or Certifications: Relevant industry certifications (or equivalents) such as CISSP, SANS GIAC (e.g., GSEC, GCWN), or Microsoft Certified: Azure Security Engineer Associate (preferred).

· 10 years of hands-on experience with Microsoft Active Directory Certificate Services (AD CS) -OR Equivalent platform, including design, deployment, and troubleshooting of Certificate Authorities (CAs), Online Responders (OCSP), and Network Device Enrollment Service (NDES).

· 3 years of expertise in certificate lifecycle management (CLM) platforms (e.g., Venafi, AppViewX, Keyfactor) and Hardware Security Modules (HSMs) (e.g., Thales, nCipher, Utimaco).

· 5 years of proven track record of successfully delivering complex PKI projects in large-scale enterprise environments.

· 5 years of experience driving products from concept and ideation through successful launch.

· 5 years of experience working on a team employing standardized project delivery methods (Agile/Scrum development methods preferred).

· 5 years of experience in understanding of and working with non-functional requirements.

· 5 years of experience of working in an enterprise environment.

Location: ( Hybrid position and Greenville, SC )

Disclaimer:

Kyyba is an Equal Opportunity Employer.

Kyyba does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status or any other basis covered by appropriate law. Minorities / Females / Protected Veterans / Individuals with Disabilities are encouraged to apply. All employment is decided on the basis of qualifications, merit, and business need.”

It is the policy of Kyyba to provide reasonable accommodation when requested by a qualified applicant or employee with a disability, unless such accommodation would cause an undue hardship. The policy regarding requests for reasonable accommodation applies to all aspects of employment, including the application process. If reasonable accommodation is needed, please contact Kyyba at 248-813-9665

Rewards:

Medical, dental, vision

401k

Term life

Voluntary life and disability insurance

Optional Pre-paid legal plan

Optional Identity theft plan

Optional Medical and dependent FSA

Work-visa sponsorship

Opportunity for advancement

Long-term assignment with opportunity for hire by client

SELECT AWARDS

· An INC 5000 company for 10 years

· Corp! Michigan Economic Bright Spots

· Crain’s Detroit Business Top Staffing Service Companies in Detroit

· TechServe Alliance Excellence Award- IT and Engineering Staffing & Solutions

· Best of MichBusiness winner in HR Wizards & Partnerships

· Metro Detroit Elite Category: Recruitment, Selection & Orientation for 101 Best & Brightest

· 101 Best & Brightest Companies to Work for in Michigan