• Compensation: $185,000 - $225,000 Per Year Plus Bonus

• Location: New York,, New York
• Type: Perm
• Job #21710

A global multi manager hedge fund is looking for a PKI Engineer for their NYC office.  The person will play a critical role in the architecture, development, deployment, and management of the firm’s Private Key Infrastructure (PKI) solution leveraging Hardware Security Modules (HSM) and a Certificate Lifecycle Management (CLM) tool.

What you’ll do 
• Architect, engineer, and deploy a hybrid environment (CLM) solution that integrates with on-premise Microsoft Certificate Authority, cloud, and SaaS applications 
• Architect, engineer and deploy an on-premise HSM solution (Thales, SafeNet LUNA, or similar) to protect cryptography keys used by the firm within applications and servers. 
• Champion expanded use of the PKI within the firm 
• Provide ongoing integration support with application teams and cryptography assistance 
• Provide infrastructure implementation assistance and operational services for Bring your own key/Enterprise Key Management (BYOK/EKM) infrastructures hosted on-premises and Amazon Web Services(AWS), Cloud HSM, and Azure KeyVault 
• Perform ongoing assessments and remediation of existing PKI infrastructure 
• Partner with stakeholders and external vendors to design, develop, deploy, and support best-in-class solutions to satisfy business requirements 

What’s Required  

• Minimum of 2-3 years of experience as a PKI engineer or architect managing Microsoft PKI 
• Experience preparing detailed architecture and design documents 
• Previous experience deploying, managing, and administrating specific certificate lifecycle management tools such as AppViewX, Keyfactor, or Venafi 
•  Experience with management vaulting solutions such as CyberArk or HashiCorp 
• 24/7 accessibility in the event of an emergency