TC - CS - Data Protection and Privacy - PKI - Manager

Key Responsibilities

• Lead end to end discovery programs for SSH keys, SSL/TLS certificates, and cryptographic assets across hybrid enterprise environments.
• Oversee analysis of key and certificate usage patterns, drive identification of security gaps, and define enterprise level remediation strategies.
• Establish, implement, and enforce secure lifecycle management practices for SSH, SSL/TLS certificates, and related cryptographic controls.
• Direct cryptographic discovery across applications, services, and infrastructure to ensure full visibility of cryptographic primitives and algorithms in use.
• Conduct enterprise cryptographic posture assessments, including quantum readiness evaluations.
• Drive collaboration with architecture, engineering, and development teams to define and deploy quantum safe cryptographic strategies.
• Develop, review, and maintain comprehensive documentation, standards, operating models, and security governance for cryptographic systems.
• Mentor team members and guide technical deliverables across cryptography and PKI initiatives.

Required Skills

• Minimum 7+ years of experience in Cybersecurity with demonstrated expertise in PKI, cryptography, and certificate lifecycle management.
• Deep hands on experience with platforms such as Venafi, AppViewX, Thales, Sectigo, MSFT AD CS, and enterprise CLM/crypto platforms.
• Proven experience leading enterprise scale cryptographic discovery, assessment, and remediation programs.
• Strong understanding of cryptographic architecture, PKI, SSL/TLS, SSH, HSMs, trust stores, and secure automation practices.
• Experience with Linux/Unix/Windows administration and scripting/automation (Python, Bash, PowerShell).
• Solid understanding of cloud ecosystems (AWS, Azure, GCP) and cloud native certificate/key services.
• Strong stakeholder management, communication, and leadership skills with the ability to translate complex technical concepts for diverse audiences.