Manager, Cryptographic Infrastructure and Key Management

• Design, deploy, and manage advanced PKI and key management solutions, ensuring secure and resilient operations across the organization
• Establish and maintain key lifecycle management processes, encompassing creation, distribution, rotation, renewal, and retirement for applications, databases, infrastructure, and storage subsystems Develop and implement target state architecture and operating models for PKI and cryptographic infrastructure; integrate cryptographic solutions with enterprise applications and systems to facilitate secure communication and data protection
• Utilize and manage tools for key management, including Microsoft Active Directory Certificate Services, OpenSSL, HashiCorp Vault, AWS KMS, Azure Key Vault, and Google Cloud Key Management Service
• Lead project and program management for security initiatives, coordinating resources and timelines effectively; technically guide and monitor the team to configure, deploy, and manage Hardware Security Modules (HSMs), utilizing products like Thales, Gemalto, and SafeNet
• Collaborate with cross-functional teams to support cryptographic protocols, advance security initiatives, and ensure comprehensive security measures
• Document architecture designs, procedures, and strategic approaches; facilitate knowledge transfer and training for technical teams.; conduct regular assessments and audits to ensure compliance with industry standards and frameworks, such as NIST, ISO 27001, and CIS; troubleshoot and resolve complex PKI-related and key management issues, minimizing business disruption
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment

• Minimum five years of recent experience designing and implementing PKI and key management solutions, including integration with enterprise and cloud-based applications
• Bachelor's degree in computer science, information security, or a related field with proven expertise in managing key lifecycle processes across diverse infrastructures and platforms
• Strong understanding of HSMs, cryptographic protocols, and integration with Registration Authorities (RA) and Certificate Authorities (CA)
• Proficiency in programming languages such as Java and Python, with experience in scripting and automation
• Excellent analytical, problem-solving, and communication skills to manage complex issues and define strategic security processes
• Hands-on experience with key management tools and familiarity with network security concepts, secure communication protocols, and cloud security practices; knowledge of core infrastructure services and proficiency in network troubleshooting techniques; experience with security operations tools and best practices
• Ability to travel as required
• Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)

KPMG offers a comprehensive compensation and benefits package. KPMG is an equal opportunity employer. KPMG complies with all applicable federal, state and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state, or local laws. The attached link contains further information regarding KPMG's compliance with federal, state and local recruitment and hiring laws. No phone calls or agencies please.

KPMG recruits on a rolling basis. Candidates are considered as they apply, until the opportunity is filled. Candidates are encouraged to apply expeditiously to any role(s) for which they are qualified that is also of interest to them.

Los Angeles County applicants: Material job duties for this position are listed above. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness, and safeguard business operations and company reputation. Pursuant to the California Fair Chance Act, Los Angeles County Fair Chance Ordinance for Employers, Fair Chance Initiative for Hiring Ordinance, and San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.