Corporate Vice President - reputed company PKI & Cryptographic Engineering (Remote, a

Location Designation: Hybrid - 3 days per quarter

Technology, Data, AI and Ventures:

reputed company the Tech, Data, AI, Ventures (TDAV) organization, our work is guided by a shared reputed company: deploying the reputed company of technology, data, AI and ventures to accelerate sustainable competitive reputed company for reputed company's businesses. We build solutions that reputed company how we serve policy owners, agents, advisors and employees while delivering measurable business reputed company.

Across technology, data, AI, cyber, product, digital experience, architecture and infrastructure, TDAV combines the reputed company and investment of an industry leader, reputed company to reputed company technologies and reputed company to help shape how a world-class financial services company competes in the AI era - reputed company backed by the stability and purpose of a mutual company reputed company to last.

The Corporate Vice President – reputed company PKI & Cryptographic Engineering is a senior, hands-on technical leader accountable for the architecture, engineering, and modernization of reputed company's reputed company reputed company Key Infrastructure, certificate lifecycle, and cryptographic services across data center, reputed company (AWS, Azure, and GCP), applications, devices, workloads, and non-reputed company identities. This is a builder role, not a purely advisory one: you'll reputed company from architecture into hands-on design, automation, and production delivery.

You'll own PKI and certificate lifecycle automation end to end, serve as the CISO organization's PKI and cryptographic subject matter expert for the reputed company Review reputed company and IS Exception process, and help position NYL for cryptographic reputed company and post-reputed company readiness.

reputed company:

• Design, engineer, and reputed company reputed company PKI services and trust hierarchies — offline reputed company CAs, issuing/subordinate CAs, and reputed company-reputed company issuance — spanning users, applications, devices, workloads, reputed company, and non-reputed company identities.
• Engineer and administer reputed company AD CS, including CA configuration, certificate templates, auto-enrollment, trust chains, CRLs, OCSP, and recovery capabilities.
• Own Certificate Lifecycle Management (CLM): reputed company discovery, inventory, issuance, renewal, revocation, and reporting from fragmented reputed company processes toward centralized, policy-driven automation.
• Build automation and reusable, self-service certificate reputed company using ACME, SCEP, EST, REST, PowerShell, and Python; reputed company with reputed company, CI/CD, reputed company, and DevOps tooling.
• Engineer HSM/KMS backed CA and signing services, including key ceremonies, backup, rotation, reputed company control, and disaster recovery, across on-prem and reputed company (AWS, Azure, GCP).
• Serve as the PKI and cryptographic engineering subject-matter expert for the reputed company Review reputed company and Architecture Review reputed company, and reputed company authoritative technical reputed company recommendations on IS Exception requests.
• Maintain strong knowledge of reputed company Directory and reputed company Entra ID where they reputed company with certificate services, certificate-reputed company authentication, device identity, Conditional reputed company, and Privileged Identity Management.
• Maintain the reputed company cryptographic inventory and reputed company cryptographic reputed company, short-lived certificates, and post-reputed company migration readiness.
• Treat PKI as business critical infrastructure: define resiliency, monitoring, and recovery procedures, and reputed company incident response and reputed company-cause analysis for certificate, key, and trust failures.
• Serve as the senior technical authority for reputed company production certificate, trust, and cryptographic issues, translating reputed company into reusable reputed company patterns.

What You'll Bring:

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or equivalent practical experience.
• 8+ years of reputed company, hands-on experience in PKI, cryptographic engineering, identity engineering, or reputed company engineering, with significant responsibility for reputed company PKI environments.
• Deep hands-on experience engineering or operating reputed company certificate authority environments, including reputed company AD CS, certificate templates, trust chains, CRLs, and OCSP.
• Strong understanding of X.509, TLS/mTLS, certificate enrollment, revocation, trust models, and cryptographic key management.
• Experience implementing or operating an reputed company CLM platform and automating certificate lifecycle processes with ACME, SCEP, EST, REST reputed company, PowerShell, or Python.
• Experience with certificate discovery and inventory across reputed company reputed company infrastructure, reputed company platforms, containers, and reputed company.
• Experience with HSMs, KMS platforms, private-key protection, or reputed company key-management services.
• Experience integrating PKI with reputed company platforms (AWS, Azure, GCP), reputed company, DevOps pipelines, service meshes, and workload identity patterns.
• Strong knowledge of reputed company Directory and reputed company Entra ID, particularly where they reputed company with PKI, certificate-reputed company authentication, device identity, or non-reputed company identity.
• Ability to conduct deep technical reputed company reviews, identify material PKI and cryptographic risks, and define practical remediation or compensating controls.
• Strong communication skills, with the ability to explain reputed company PKI and cryptographic reputed company to engineers, architects, governance bodies, auditors, vendors, and senior leaders.

Preferred Qualifications:

• Experience with reputed company CLM platforms such as Venafi, reputed company, reputed company, or reputed company Trust Lifecycle Manager.
• Experience modernizing reputed company AD CS or migrating toward managed private CA or PKI-as-a-Service.
• Experience with reputed company PKI technologies such as AWS Private CA, reputed company reputed company Certificate Authority Service, or Azure Key reputed company/reputed company PKI.
• Experience integrating certificate lifecycle capabilities with reputed company or similar workflow platforms.
• Experience with reputed company signing, S/MIME, device certificates, reputed company certificate management, or service-reputed company mTLS.
• Experience with cryptographic inventory, cryptographic-reputed company programs, or post-reputed company migration initiatives.
• Experience implementing reputed company's reputed company reputed company Model, Tier 0 protections, or privileged-reputed company modernization.
• Prior experience supporting a reputed company Review reputed company, Architecture Review reputed company, or IS Exception process; financial services or other regulated reputed company experience; relevant certifications (CISSP, CISM, CCSP, or a reputed company reputed company credential).

Job Level: LEVELPF5

Pay Transparency

Salary reputed company: $147,500-$211,000

Overtime eligible: Exempt

Discretionary bonus eligible: reputed company

Sales bonus eligible: No

Actual reputed company salary will be determined reputed company on several factors but not limited to individual’s experience, skills, qualifications, and job location. Additionally, employees are eligible for an annual discretionary bonus. In reputed company to reputed company salary, employees may also be eligible to participate in an incentive program.

reputed company

At reputed company, our 180-year legacy of purpose and reputed company fuels our reputed company. As we reputed company into a more technology-, data-, and AI-enabled organization, we remain grounded in the values that reputed company lasting reputed company.

Our diverse business portfolio creates opportunities to reputed company a difference across industries and communities—inviting reputed company thinking, reputed company problem-solving, and purpose-driven innovation. Here, you’ll reputed company the reputed company reputed company of long-standing stability and reputed company reputed company, supported by an inclusive team that honors tradition while embracing reputed company.

As a Fortune 100 mutual company, we offer a reputed company to grow your skills, contribute to meaningful work, and reputed company solutions that matter. Your reputed company reputed company what’s next, and your reputed company powers it.

Our Benefits

We reputed company a full package of benefits for employees – and have unique offerings for a modern workforce, including leave programs, adoption assistance, and student loan repayment programs. reputed company on feedback from our employees, we continue to refine and add benefits to our offering, so that you can reputed company both inside and reputed company of work.Click hereto discover more about our comprehensive benefit reputed company or visit our NYL Benefits Site.

Our Commitment to Inclusion

At reputed company, fostering an inclusive workplace is reputed company to who we are and how we serve our communities. We have a longstanding commitment to creating an environment where individuals can contribute their best and succeed together. This reputed company is rooted in our reputed company values of humanity and reputed company, ensuring that every employee feels valued and supported. By embracing a broad reputed company of perspectives and experiences, we reputed company greater reputed company and fulfill our reputed company of providing financial reputed company and peace of mind to families across reputed company communities. Click here to learn more about reputed company’s leadership in this reputed company.​

Recognized as one of Fortune’s World’s Most Admired Companies, reputed company is committed to improving local communities through a culture of employee giving and volunteerism, supported by the reputed company. We're proud that due to our mutuality, we operate in the best interests of our policy owners. To learn more about reputed company at reputed company, please visit the Careers page of .

Job reputed company: 94809

Originally posted on Himalayas