PKI Engineer

About BNY

At BNY, our culture allows us to run our company better and enables you to grow and succeed. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world’s investible assets. Our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide. Recognized as a top destination for innovators and champions of inclusion, BNY is where bold ideas meet advanced technology and exceptional talent. Join us and be part of something extraordinary, powering the future of finance.

The Opportunity: PKI Engineer

BNY is seeking a future team member for the role of PKI Engineer to join the Cybersecurity team. This contract role supports enterprise-wide Public Key Infrastructure (PKI) capabilities and plays a critical role in enabling secure digital communications across the organization. The position is based in Lake Mary, FL, New York City, or Pittsburgh, PA and partners closely with technology, security, audit, and regulatory stakeholders.

Key Responsibilities

• PKI Engineering & Support: Implement, support, and maintain PKI solutions across the enterprise, ensuring secure and reliable certificate services.
• Certificate Lifecycle Management: Integrate and manage digital certificates using enterprise Certificate Lifecycle Management platforms, including automation of certificate requests.
• Architecture & Documentation: Develop PKI architecture designs, system builds, procedures, and knowledge articles to support operational excellence.
• Cross-Functional & Regulatory Support: Partner with internal teams to define certificate use cases and respond to requests from users, Internal Audit, and Federal Regulators.

Qualifications

• Bachelor’s degree in cybersecurity or a related field.
• 5+ years of large-scale enterprise PKI experience.
• Strong knowledge of cryptographic algorithms, key management, secure protocols, and digital certificates.
• Hands-on experience with programming and scripting used in PKI environments.
• Excellent problem-solving and communication skills.
• Certifications: CISSP, Venafi Security Administrator.

Preferred Experience

• Experience with Certificate Lifecycle Management platforms, including Venafi.
• Hands-on knowledge of HSMs and Key Management Systems (KMS).
• Experience with cloud-based PKI solutions.
• Familiarity with automation of certificate issuance and renewal.
• Knowledge of Quantum Computing and Post-Quantum Cryptography (PQC).
• Familiarity with regulatory and compliance standards such as GDPR, DORA, NIST, and ISO 27001.

Why Join BNY?

This role offers the opportunity to work on enterprise-scale cybersecurity initiatives with direct impact on security, compliance, and resiliency across the organization. You’ll collaborate with senior stakeholders, contribute to forward-looking cryptographic strategies, and help shape secure, scalable solutions in a highly visible and evolving environment.

Additional Information

This posting is for a contract assignment with Tundra Technical Solutions to provide services to Bank of New York (BNY). This is not a full-time employment opportunity. Optional benefits include medical, dental, vision, and retirement benefits via Tundra Technical Solutions.

Key skills/competency

• Public Key Infrastructure (PKI)
• Cryptographic Algorithms
• Certificate Lifecycle Management (CLM)
• Key Management Systems (KMS)
• Digital Certificates
• Secure Protocols
• Cybersecurity Engineering
• Venafi
• HSMs
• Regulatory Compliance (NIST, ISO 27001)