Director, PKI Operations

United States - Remote·Posted today

awsgcp

<div class="content-intro">Who we are DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at <a href="http://www.digicert.com/">www.digicert.com</a></div>Job summary The Director, PKI Operations will lead the strategy, design, and day-to-day operations of DigiCert's Public Key Infrastructure. This role is responsible for ensuring the availability, security, and compliance of DigiCert's certificate authority (CA) infrastructure and related PKI services. The ideal candidate brings deep PKI expertise, strong leadership skills, and a track record of operating mission-critical security infrastructure at scale.    What you will do <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":260,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Own and oversee all PKI operations, including CA hierarchy management, HSM administration, and key ceremony execution. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":260,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="2" data-aria-level="1">Lead, mentor, and scale a high-performing PKI operations team across multiple time zones. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":260,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="3" data-aria-level="1">Ensure continuous availability, integrity, and security of DigiCert's CA infrastructure in compliance with WebTrust, CA/Browser Forum Baseline Requirements, and applicable regulations. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":260,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="4" data-aria-level="1">Drive automation and operational efficiency across certificate issuance, revocation, renewal, and monitoring workflows. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":260,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="5" data-aria-level="1">Partner with engineering, compliance, and product teams to support new PKI capabilities and ensure alignment with trust framework standards. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":260,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="6" data-aria-level="1">Lead internal and external PKI audits (WebTrust, ETSI), manage audit readiness, and remediate findings. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":260,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="7" data-aria-level="1">Develop and maintain PKI policies, procedures, Certificate Practices Statements (CPS), and Certificate Policies (CP). </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":260,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="8" data-aria-level="1">Define and enforce DR/BCP strategies for all HSM infrastructure. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":260,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="9" data-aria-level="1">Serve as a subject matter expert and escalation point for complex PKI incidents and customer-impacting issues. </li> </ul> What you will have <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":260,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="10" data-aria-level="1">10+ years of experience in PKI, information security, or related infrastructure roles, with 3+ years in a leadership capacity. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":260,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="11" data-aria-level="1">Deep hands-on expertise with CA operations, X.509 certificates, HSMs (e.g., Thales/), OCSP, CRL, and ACME protocols. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":260,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="12" data-aria-level="1">Strong working knowledge of CA/Browser Forum Baseline Requirements, WebTrust for CAs, RFC 5280, and related standards. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":260,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="13" data-aria-level="1">Experience managing PKI audits and interfacing with external auditors. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":260,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="14" data-aria-level="1">Proven ability to lead geographically distributed operations teams in a 24/7 environment. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":260,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="15" data-aria-level="1">Strong communication skills with the ability to translate complex PKI concepts for executive and non-technical audiences. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":540,"335559991":260,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="16" data-aria-level="1">Experience with cloud PKI environments (AWS, Azure, GCP) and PKI automation tools is a plus. </li> </ul>   Benefits <ul> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Competitive compensation and comprehensive health, dental, and vision coverage </li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Retirement savings programs with company matching (401(k) or RRSP) </li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Generous paid time off, including holidays, and vacation </li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Paid parental leave and family support benefits </li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Life and disability coverage </li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Flexible spending and health savings options (where applicable) </li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Health and wellness support, including gym reimbursement and wellness programs </li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Employee Assistance Program with 24/7confidential support for employees and families </li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Education assistance and professional development opportunities </li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Access to LinkedIn Learning and continuous learning resources </li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Employee referral bonus program and additional company perks and discounts </li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Internal rewards and recognition platform (Motivosity) to celebrate and acknowledge project wins, milestone achievements, and the outstanding contributions of our colleagues</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 12pt;">Business travel insurance and global employee support programs </li> </ul> To protect candidate information and maintain a secure hiring process, all applications must be submitted through our careers portal. Resumes or CVs sent directly via email will not be reviewed or considered. DigiCert is an Equal Opportunity employer and is committed to diversity in its workforce. In compliance with applicable federal and state laws, DigiCert prohibits discrimination on the basis of race or ethnicity, religion, color, national origin, sex, age, sexual orientation, gender identity/expression, veteran’s status, status as a qualified person with a disability, or genetic information. Individuals from historically underrepresented groups, such as minorities, women, qualified person with disabilities, and protected veterans are strongly encouraged to apply.

Apply for this role