Principal Engineer, PKI

At AIG, we are reimagining the way we help customers to manage risk. Join us as a Principal Engineer, PKI to play your part in that transformation. It’s an opportunity to grow your skills and experience as a valued member of the team.

Make your mark in Information Technology

At AIG, technology is at the heart of everything we do, from underwriting risks to processing claims. The Information Technology team equips our colleagues with the latest tools to complete their work efficiently and with the highest standards of excellence. The team is responsible for shielding the company’s systems from security risks, while designing technology strategies that enable AIG’s businesses to achieve their goals. AIG’s Information Technology functions include enterprise architecture, software and systems engineering, cybersecurity, and technology risk and compliance.

How you will create an impact

The Principal Engineer plays a crucial role in managing and monitoring all aspects of public key infrastructure (PKI) services. You will provide strategic direction and leadership for AIG’s PKI and Certificate management program providing subject matter expertise and in-depth knowledge of PKI products, technologies, and best practices. You will partner closely with Identity & Access Management (IAM) architects and application owners to implement PKI solutions that are aligned with enterprise IT strategies.

Responsibilities

• Lead the infrastructure protection strategy to create, evolve, and secure our internal Public Key Infrastructure (PKI) and credential management security strategy
• Create design components, develop code, and test changes using test-driven development methodologies
• SME and technical lead for Internal Certificate Authority and PKI implementation
• Provide subject matter expertise in resolving complex problems related to infrastructure and PKI
• Manage, secure, engineer and provide governance for key and certificate management services, including supporting robust, enterprise-grade Public Key Infrastructure (PKI), certificate lifecycle management (CLCM), infrastructure automation and credential management (CMS) systems.
• Manage hardware security modules (HSMs) and Key Management
• Implement and maintain an automated certificate renewal program; capture use-cases for certificate revocation, enrollment & renewal processes
• Monitor creation of encryption keys to ensure they are protected against modification, and private keys are protected against unauthorized disclosure
• Contribute to the design of new Entra ID infrastructure from PKI perspective
• Define Trust Strategies and understand security and governance requirements for Certification Authorities

What you'll need to succeed

• BA/BS in Cybersecurity, Information Technology, or related field; advanced degree preferred, Computer Science, Computer Engineering or Related Field.
• 12+ years of IT experience, 8+ years' experience designing, deploying, and supporting PKI environments in a Windows domain. Experience deploying internal certificate authorities, issuing external certificates from external certificate authorities and installing certificates on systems, and building out and maintaining certificate authority databases, as well as designing, deploying, and supporting the use of smart cards for system authentication
• Sound knowledge and experience in Enterprise Architecture, Strategy, and IT Security
• Strong understanding of IAM domain including Access Management, Authentication, and Key Management implementations
• Knowledge in Keyfactor and Entrust products is preferred
• Strong experience with PKI automation and Certificate lifecycle management
• Ability to lead projects through full lifecycle, including requirements gathering, architecture and design, scoping, implementation, and operationalization
• Demonstrated experience implementing PKI for large firms
• Relevant certifications (PKI, CISSP, KMS) is a plus
• In-depth knowledge of PKI principles with subject matter expertise in developing best practices around standardized management of access controls 
• Understanding of IAM relevant technical security skills, such as Identity Governance, Single Sign-On and authentication, Multi-Factor Authentication, Microsoft and AD tools for Access Management and controls, Privileged access management, and AWS security
• Advanced understanding of the broader impact of Information Security from a business perspective
• Excellent analytical skills with high attention to detail and accuracy
• Strong problem-solving skills, with the ability to identify root causes and develop solutions
• Excellent leadership, communication, and collaboration skills
• Ability to articulate complex technical conce