PKI Architect

Job Description

PKI Architect:
On behalf of our Banking client, Procom is searching for a PKI Architect for a 4-month role. This position is a hybrid position with 3 days onsite at our client’s Toronto, Ontario office.

PKI Architect - Job Description:
This project involves upgrading the software currency for an Enterprise PKI Architect with a focus on a Multi-Tier Certificate Authority Infrastructure. The role requires enhancing the security and compliance of the existing PKI infrastructure, ensuring it meets organizational and industry standards.

PKI Architect - Responsibilities:
• Architect and lead the design of a scalable, secure, and compliant multi-tier PKI infrastructure, including offline root and multiple subordinate CAs across global regions.
• Define and drive certificate deployment strategies tailored to diverse enterprise use cases across various regions.
• Establish governance and lifecycle frameworks for certificate issuance, renewal, revocation, and automation.
• Lead integration efforts between PKI and Microsoft technologies as well as third-party platforms.
• Design and oversee implementation of PKI protocols and services including OCSP, CRL distribution, SCEP, PKCS, and key archival/recovery mechanisms.
• Ensure architectural compliance with industry standards and internal audit requirements.
• Develop and maintain enterprise-level documentation, including architecture diagrams, operational procedures, and security controls.
• Own disaster recovery strategy for PKI infrastructure, including planning, testing, and continuous improvement of resilience measures.
• Provide technical leadership and mentorship, guiding PKI engineers and analysts.

PKI Architect - Mandatory Skills:
• 8+ years of experience in PKI design and architecture.
• Proven experience with multi-tier CA environments.
• Strong knowledge of Microsoft ADCS, certificate templates, CRLs, OCSP, and auto-enrollment.
• Experience deploying certificates for enterprise use cases.
• Proficiency in PowerShell scripting for automation and lifecycle management.
• Fluent in English with excellent communication and documentation skills.

PKI Architect – Nice-to-Have Skills:
• Experience in financial institutions or regulated environments.
• Microsoft certifications (e.g., Azure Security Engineer, Windows Server).
• Familiarity with cloud identity platforms (Intune, Entra ID).
• Experience with certificate deployment in hybrid cloud environments.

PKI Architect – Assignment Length:
This is a 4-month contract position until October 31st.

PKI Architect - Start Date:
ASAP.

PKI Architect - Assignment Location:
Toronto, Ontario, Canada. Hybrid position with 3 days in office.

This employer uses both human and technology-assisted tools to support candidate screening and assessment. Final hiring decisions are made by people.