Expoint - all jobs in one place
The point where experts and best companies meet
Limitless High-tech career opportunities - Expoint

PNC Cryptographic Key Management/HSM - Security Engineer 
Remote, Remote 
957308351

15.05.2025
**PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position**
• Experience with certificate automation including an in-depth understanding of both automation practices, certificate management and the ability to script as needed.
• Advanced knowledge of Cryptography to deliver post Quantum crypto capabilities including understanding of algorithms and impact of Quantum computing capabilities.
• Advanced knowledge of certificate lifecycle management issues to support troubleshooting and escalated support requests.1. Technical Skills
• Experience working with certificates.
• Scripting and Automation: Experience in automation and scripting (specifically PowerShell and or Python)
• Advanced Trouble shooting skills with TLS communications.
• Cloud Security: Familiarity with securing data in cloud environments (Azure, Microsoft 365, Purview, AWS etc.)
• Data Security: Expertise in Data Protection techniques and technologies.
• Endpoint Security: Skills in securing end-user devices and understanding endpoint protection tools are a plus.
• Network Security: Understanding of network security protocols, firewalls, VPNs, and intrusion detection systems are a plus.
• Power BI and Power Automate Experience: Skills in Data Virtualization and Automation are a plus.
• Limited off hour on-call support will be required.2. Compliance and Regulatory Knowledge
• Data Governance: Familiarity with data governance frameworks and practices to ensure data quality, privacy, and security.
• Audit and Reporting: Ability to prepare for and respond to compliance audits, as well as generate necessary reports and documentation.
• Records Management Experience is a plus.3. Soft Skills and Professional Qualities
• Delivery Oriented: The ability to deliver initiatives and Business as Usual (BAU) activities efficiently and effectively.
• Problem-Solving: Strong analytical and troubleshooting skills to identify and resolve TLS certificate issues.
• Attention to Detail: Precision in configuring and monitoring data security tools and practices.
• Communication: Ability to explain complex technical concepts to non-technical stakeholders and work across different teams.
• Adaptability: Ability to stay updated with evolving security threats and technologies.
• Ethics and Integrity: Strong ethical principles to handle sensitive and confidential information responsibly.4. Experience
• Practical Experience: Working with certificate life cycle management. Direct experience automating administrative functions. Venafi experience a very large plus. ADCS/PKI experience a large plus.• Incident Response: Experience in handling security incidents, breaches, and mitigating risks.
• Delivery: Proven track record in driving delivery for initiatives and BAU activities.
• Metrics Management: Experience in identifying and developing Metrics, KRIs to support data protection processes.
• Industry Experience: Experience in the industry or sector relevant to your business, such as finance, healthcare, or technology.5. Tools and Technologies
• Familiarity with Data Protection solutions. (PowerShell, Microsoft 365 etc.)
• Scripting and Automation: Experience in automation and scripting development (PowerShell, Python)
• Power BI and Power AutomateJob Description
  • Provides subject matter expertise when applying security concepts. Leverages technical knowledge and industry experience to design, build, and maintain technology solutions. Responsible for deliverables related to project timelines.
  • Responsible for working with architecture to take high level architectural designs and determine the specifics around implementation details (ex: sizing) integration details, onboarding and operationalization.
  • Evaluates patches, updates, and ongoing maintenance. Determines impacts to existing solutions when new standards are implemented. Utilizes change control and other governance processes to ensure alignment of solutions .
  • Develops detailed implementation, configuration, design, and engineering documentation. Build and implement solutions.
  • Works with operational partners to enable transition and day-to-day supportability.
  • Provides engineering support to existing technology in a production environment and collaborating with other groups as required. Seeks opportunities to grow a broad knowledge base to complement specific subject matter expertise.

PNC Employees take pride in our reputation and to continue building upon that we expect our employees to be:

  • Customer Focused - Knowledgeable of the values and practices that align customer needs and satisfaction as primary considerations in all business decisions and able to leverage that information in creating customized customer solutions.
  • Managing Risk - Assessing and effectively managing all of the risks associated with their business objectives and activities to ensure they adhere to and support PNC's Enterprise Risk Management Framework.
Qualifications

Successful candidates must demonstrate appropriate knowledge, skills, and abilities for a role. Listed below are skills, competencies, work experience, education, and requiredneeded to be successful in this position.

Analytical Thinking, Effective Communications, Information Security Management, Information Security Technologies, IT Environment, IT Standards, Procedures & Policies, IT Systems Management, Network and Internet Security, Problem Solving, Technical TroubleshootingRoles at this level typically require a university / college degree, with 5+ years of industry-relevant experience. Specific certifications are often required. In lieu of a degree, a comparable combination of education, job specific certification(s), and experience (including military service) may be considered.No Required Certification(s)No Required License(s)

This position is subject to the requirements of Section 19 of the Federal Deposit Insurance Act (FDIA) and, for any registered role, the Secure and Fair Enforcement for Mortgage Licensing Act of 2008 (SAFE Act) and/or the Financial Industry Regulatory Authority (FINRA), which prohibit the hiring of individuals with certain criminal history.

California Residents

Refer to the