About the Role

We are seeking an Assistant Key Manager to support the secure operation and governance of our Certification Authority (CA) and Public Key Infrastructure (PKI) environment.

This role is part of a structured development program designed to prepare the successful candidate to assume future Key Management responsibilities within a globally trusted Certificate Authority.

The Assistant Key Manager will support certificate and key lifecycle operations, compliance activities, security governance, documentation management, audit readiness, and operational process improvements. The position works closely with security, engineering, compliance, and operational teams to ensure the integrity and trustworthiness of CA services.

Key Responsibilities

PKI & Certificate Operations

• Support Certification Authority (CA) operations and PKI-related processes.

• Assist in the management of certificate and cryptographic key lifecycle activities.

• Participate in key generation, key ceremonies, certificate issuance, renewal, revocation, and archival activities.

• Support controls surrounding Hardware Security Modules (HSMs) and sensitive cryptographic assets.

• Ensure operational procedures are executed according to approved standards and documented processes.

Governance & Compliance

• Maintain and update Certification Practice Statements (CPS), Certificate Policies (CP), operational procedures, and related documentation.

• Ensure compliance with WebTrust, CA/Browser Forum requirements, internal security policies, and regulatory obligations.

• Support internal and external audits through evidence gathering, documentation reviews, and control validation.

• Maintain accurate operational records, inventories, logs, and audit trails.

Process Improvement

• Review and improve operational controls, workflows, and governance processes.

• Identify opportunities to enhance security, operational efficiency, and service resilience.

• Participate in change management and operational risk management activities.

Stakeholder Collaboration

• Work closely with Security, Compliance, Infrastructure, Product, and Engineering teams.

• Coordinate with auditors, regulators, customers, and external partners when required.

• Serve as a trained backup for critical operational responsibilities.

Required Qualifications

• Bachelor's Degree in IT, Computer Science, Engineering, Information Security, or related discipline.

• 3-7 years of experience in technology operations, cybersecurity, PKI, identity management, infrastructure administration, compliance, or governance.

• Experience in at least two of the following:

  • Public Key Infrastructure (PKI)

  • Certificate Management

  • Identity & Access Management (IAM)

  • Privileged Access Management (PAM)

  • Systems Administration

  • Network Security

  • Cryptography

  • Security Compliance

  • IT Governance

• Experience maintaining operational procedures, audit documentation, SOPs, or governance records.

• Familiarity with change management and process-controlled environments.

• Strong analytical and problem-solving skills.

Preferred Qualifications

Candidates with experience in any of the following will be highly regarded:

• PKI Administration

• Digital Certificates (SSL/TLS)

• Certificate Lifecycle Management

• Certificate Authority Operations

• Hardware Security Modules (HSM)

• Key Management

• CyberArk

• Privileged Access Management (PAM)

• Identity & Access Management (IAM)

• Active Directory Certificate Services (ADCS)

• WebTrust Audits

• ISO 27001

• ITIL

• Information Security Governance