Public Key Infrastructure (Pki) Digital Certificate Lifecycle Management Specialist

Location:

4910 Tiedeman Road, Brooklyn Ohio

Senior PKI Certificate Lifecycle Management role, including inventorying, monitoring and reporting of PKI certificates. Join Data Security Governance team that is responsible for CLM; Data Security standards and enforcement; Encryption and Encryption Keys standards and support; and Database Activity Monitoring.

Essential Job Functions:

• Building and maintaining a PKI certificate inventory of different certificate types, using inputs from multiple Certificate Authorities and discovery of active certificates bound to network IPs and ports.
• Maintain trusted root authority signers.
• Review and approve/reject certificate enrollment requests.
• Configure and administer usage of certificate automation tools and platforms such as AppViewX Cert ++.
• Drive automation of certificate lifecycle management via CLM and workflow platforms.
• Collaborate with engineering and other technical teams in configuring and supporting the above tools.
• Ensure 99.99%+ availability and reliability of certificate services
• Support meeting corporate success metrics for certificate renewals.
• Auditing, reporting and follow up of non-compliant certificates.
• Provide advisory to application teams who own and support certificates for their applications, including assisting certificate users with various levels of expertise.
• Develop and support PKI-related policies, standards, and procedures, including certificate guidance documentation that is easy to follow and convenient to access.
• Certificate software and certificate authority vendor management.
• Provide mentorship and training to junior team members.
• Provide continuous improvement ideas to reduce expenses and/or improve efficiency.
• Research, process and apply relevant information security standards.
• Contribute to technical documentation, specifications, and artifacts for certificates support.
• Potentially contribute to other initiatives within data protection and encryption space.

Required Qualifications:

• 10+ years of relevant IT experience.
• 5+ years of certificate lifecycle managing.
• AppViewX Cert++ experience preferred.
• Knowledge of relevant industry standards and best practices and the ability to effectively communicate and plan for critical industry timelines.
• Interpersonal skills.
• Ability to work independently, leading meetings with application and development teams discovering and documenting detailed requirements.
• Proven ability to plan, coordinate and implement certificate monitoring to prevent system outages.
• Proven experience working calmly and effectively in critical and time sensitive situations.
• Interpersonal skills including patient disposition that welcomes certificate owners to seek your assistance when needed and open-minded approach to recommendations that will improve the certificate lifecycle process.

COMPENSATION AND BENEFITS

This position is eligible to earn a base salary in the range of $96,000.00 - $181,000.00 annually. Placement within the pay range may differ based upon various factors, including but not limited to skills, experience and geographic location. Compensation for this role also includes eligibility for incentive compensation which may include production, commission, and/or discretionary incentives.

Please click here for a list of benefits for which this position is eligible.

Key has implemented an approach to employee workspaces which prioritizes in-office presence, while providing flexible options in circumstances where roles can be performed effectively in a mobile environment.

Job Posting Expiration Date: 07/13/2026

KeyCorp is an Equal Opportunity Employer committed to sustaining an inclusive culture. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, pregnancy, disability, veteran status or any other characteristic protected by law.

Qualified individuals with disabilities or disabled veterans who are unable or limited in their ability to apply on this site may request reasonable accommodations by emailing HR_Compliance@keybank.com.

#LI-Hybrid