Cryptography (PKI) and Identity Security Lead

The Cryptography (PKI) and Identity Security Lead is responsible for leading the organizations Public Key Infrastructure (PKI) Certificate Lifecycle Management (CLM) and cryptographic services programs. This role defines architecture standards governance and roadmaps for digital certificates encryption key management and machine identities and manage the PKI platform. The position also provides security architecture guidance for Identity and Access Management (IAM) and data security initiatives partnering with security infrastructure and application teams to strengthen the organizations digital trust and data protection capabilities. The ideal candidate will possess deep technical expertise in PKI a strong understanding of cybersecurity and Identity security principles and proven leadership experience.

• Lead and manage the Cryptography (PKI) team fostering a culture of collaboration accountability and continuous improvement.
• Own the enterprise Public Key Infrastructure (PKI) and Certificate Lifecycle Management (CLM) strategy roadmap standards and operations.
• Oversee the full lifecycle of digital certificates including issuance renewal revocation discovery inventory management automation and auditing.
• Drive automation of certificate and machine identity lifecycle management across enterprise applications infrastructure cloud services and devices.
• Design implement and maintain secure enterprise and vehicle PKI architectures including root and subordinate certification authorities (CAs) OCSP responders CRLs HSMs and key management solutions.
• Establish and enforce policies standards procedures and governance for digital certificates cryptographic services encryption key management and machine identities.
• Provide architecture leadership and technical guidance for Identity and Access Management (IAM) initiatives including authentication authorization MFA privileged access federation and identity governance.
• Partner with security infrastructure cloud application and business teams to enable secure authentication encryption digital signing and data protection services.
• Develop security architecture principles patterns and reference architectures related to PKI IAM cryptography and data security.
• Collaborate with enterprise architecture security engineering and operational teams to define strategic roadmaps and modernization initiatives.
• Stay current with emerging technologies industry trends regulatory developments and best practices in cryptography identity security and cybersecurity.
• Provide technical leadership and mentorship to PKI and IAM engineers.

• Bachelors degree and at least 5 years of Information Security experience
• At least 1 years of lead experience

OR

• Masters degree and at least 3 years of Information Security experience
• At least 1 years of lead experience

OR

• At least 8 years of Information Security experience
• At least 1 years of lead experience

• Qualified candidates excluding current employees must be legally authorized on an unrestricted basis (US Citizen Legal Permanent Resident Refugee or Asylee) to be employed in the United States. We do not anticipate providing employment related work sponsorship for this position (e.g. H-1B status)

• Experience integrating certificate lifecycle automation into DevOps CI/CD Kubernetes containerized and cloud-native environments.
• Understanding of security and compliance frameworks such as NIST ISO 27001 CIS Controls SOC 2 PCI DSS and industry regulatory requirements.
• Experience with enterprise identity platforms such as Microsoft Entra ID (Azure AD) Active Directory federation services SSO MFA and modern authentication protocols.
• Familiarity with certificate discovery inventory management certificate risk reduction and cryptographic posture management practices.
• Knowledge of post-quantum cryptography (PQC) cryptographic agility and emerging industry trends.

This position offers competitive market-based compensation along with a comprehensive benefits package designed to support employee wellbeing. You can learn more about the benefits offered for this position by visiting expected salary offered for this position will fall within the stated range with the final offer based on the candidates applicable skills knowledge and experience.

About TRATON
With its brands Scania MAN International and Volkswagen Truck & BusTRATONSE is the parent and holding company of theTRATONGROUP and one of the worlds leading commercial vehicle manufacturers. The Groups product portfolio comprises trucks buses and light-duty commercial vehicles. Transforming Transportation Together. For a sustainable world.: this intention underlines the Companys ambition to have a lasting and sustainable impact on the commercial vehicle business and on the Groups commercial growth.

About International
From a one-man company built on the world-changing invention of the McCormick reaper in 1831 to the 15000-person-strong company we are todayfew companies can lay claim to a history like International. Based in Lisle Illinois International Motors LLC* creates solutions that deliver greater uptime and productivity to our customers throughout the full operation of our commercial vehicles. We build International trucks and engines and IC Bus school and commercial buses that are as tough and as smart as the people who drive them. We also develop Fleetrite aftermarket everything we do our vision is to accelerate the impact of sustainable mobility to create the cleaner safer world we all deserve. As of 2021 we joined Scania MAN and Volkswagen Truck & Bus in TRATON GROUP a global champion of the truck and transport services industry. To learn more visit.

*International Motors LLC is d/b/a International Motors USA in Illinois Missouri New Jersey Ohio Texas and Utah.

We are an Equal Opportunity Employer. We evaluate qualified applicants without regard to race color religion sex sexual orientation gender identity national origin disability veteran status and other legally protected characteristics.

If you are a qualified individual with a disability and require a reasonable accommodation to access the online application system or participate in the interview process due to your disability please emailto request assistance. Kindly specify Job Requisition Number / Job Title and Location in response. Otherwise your request may not be considered.