State Street

PKI Engineer – Operations and Engineering, Assistant Vice President

State Street

full-time

Posted on:

Location Type: Office

Location: Kilkenny • Ireland

Visit company website

Explore more

✨ AI Apply
Apply

Job Level

Lead

Tech Stack

CloudLinuxUnix

About the role

  • Shape and execute the enterprise PKI strategy with a strong operational lens
  • Define and document certificate and signing key standards for internal systems and cloud platforms
  • Set requirements for certificate rotation, revocation, and incident response paths
  • Evaluate and onboard automation and discovery tools that expand certificate inventory coverage
  • Run internal CA platforms and integrations with external CAs
  • Manage HSM-backed private keys and secure signing workflows
  • Build and scale certificate automation for issuance, renewal, rotation, and revocation
  • Integrate PKI into CI/CD pipelines, cloud workloads, and service identities
  • Design workflows for compromised, expired, or non-compliant certificates
  • Track metrics for inventory completeness, revocation SLAs, rotation success, and automation coverage
  • Produce executive-level updates that clearly show progress, risk, and operational health

Requirements

  • Bachelor’s degree in a technical field or equivalent experience
  • 3–5 years working with certificate management, KMS, or CA platforms
  • 3–5 years administering Windows and Linux/Unix systems
  • Experience with: Internal and external CAs
  • Certificate lifecycle automation
  • HSM-backed key storage and signing
  • Secrets or certificate discovery platforms
  • Incident paths for compromised and expired certificates
  • PKI integrations in cloud and CI/CD pipelines
  • IAM experience, MFA, privileged access controls, DR resiliency planning
Benefits
  • Inclusive development opportunities
  • Flexible work-life support
  • Paid volunteer days
  • Vibrant employee networks

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard skills
certificate managementKMSCA platformsWindows systems administrationLinux systems administrationcertificate lifecycle automationHSM-backed key storagePKI integrationsCI/CD pipelinesIAM
Soft skills
operational strategydocumentationincident responsemetrics trackingexecutive communication