Director – PKI Operations

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership of and manage all PKI operations, which includes overseeing CA hierarchy management, HSM administration, and executing key ceremonies.

• Guide, mentor, and expand a high-performing PKI operations team across various time zones.

• Ensure the continuous availability, integrity, and security of DigiCert's CA infrastructure while adhering to WebTrust, CA/Browser Forum Baseline Requirements, and relevant regulations.

• Promote automation and enhance operational efficiency throughout certificate issuance, revocation, renewal, and monitoring workflows.

• Collaborate with engineering, compliance, and product teams to support the development of new PKI capabilities and ensure alignment with trust framework standards.

• Conduct internal and external PKI audits (WebTrust, ETSI), manage audit preparedness, and address any findings.

• Create and maintain PKI policies, procedures, Certificate Practices Statements (CPS), and Certificate Policies (CP).

• Establish and enforce disaster recovery/business continuity planning (DR/BCP) strategies for all HSM infrastructure.

• Act as a subject matter expert and escalation point for complex PKI incidents and issues that impact customers.

⛳️ Requirements

• Over 10 years of experience in PKI, information security, or related infrastructure roles, including a minimum of 3 years in a leadership position.

• In-depth hands-on experience with CA operations, X.509 certificates, HSMs (e.g., Thales), OCSP, CRL, and ACME protocols.

• Comprehensive working knowledge of CA/Browser Forum Baseline Requirements, WebTrust for CAs, RFC 5280, and associated standards.

• Experience in managing PKI audits and liaising with external auditors.

• Demonstrated ability to lead geographically distributed operations teams in a 24/7 setting.

• Excellent communication skills with the capacity to convey complex PKI concepts to both executive and non-technical audiences.

• Familiarity with cloud PKI environments (AWS, Azure, GCP) and PKI automation tools is an advantage.

🏝️ Benefits

• Competitive compensation and extensive health, dental, and vision coverage.

• Retirement savings plans with company matching (401(k) or RRSP).

• Generous paid time off, including holidays and vacation.

• Paid parental leave and family support benefits.

• Life and disability insurance coverage.

• Flexible spending and health savings options (where applicable).

• Health and wellness support, including gym reimbursement and wellness programs.

• Employee Assistance Program offering 24/7 confidential support for employees and their families.

• Educational assistance and opportunities for professional development.

• Access to LinkedIn Learning and ongoing learning resources.

• Employee referral bonus program along with additional company perks and discounts.

• Internal rewards and recognition platform to celebrate project successes, milestone achievements, and the exceptional contributions of our colleagues.

• Business travel insurance and comprehensive global employee support programs.