Overview
We are looking for an experienced PKI Architect to lead the architectural design and delivery of migrating from on-premises Active Directory Certificate Services to DigiCert ONE, a SaaS certificate management platform. This 6-month contract role involves closely collaborating with the Global Digital team, security stakeholders, and member firms to ensure a secure and compliant transition within a large enterprise environment.
Responsibilities
- Design the target-state architecture for migrating certificate services from on-premises AD CS to DigiCert ONE.
- Define and document the security and Role-Based Access Control (RBAC) model for the new certificate environment.
- Produce architecture and operational documentation for the Global Digital operational team.
- Develop runbooks and operational guidance for consuming member firms.
- Support formal customer security reviews, providing necessary documentation and expertise.
- Advise on certificate lifecycle management, encryption standards, and PKI best practices throughout the migration.
- Collaborate with technical and business stakeholders to ensure a smooth transition with minimal disruption.
Requirements
- Strong, demonstrable understanding of Active Directory Certificate Services (AD CS).
- Minimum of 5 years' hands-on experience with enterprise-grade certificate management.
- In-depth knowledge of certificates, PKI concepts, and encryption technologies.
- General working knowledge of Active Directory.
- Experience designing and implementing security and RBAC models.
- Proven experience in producing high-quality technical documentation such as architecture documents and operational guides.
- Experience supporting or participating in formal security review processes.
- Experience with SaaS-based certificate management platforms, ideally DigiCert ONE is desirable.