WHAT IS THE OPPORTUNITY?

The Certificate Services team is seeking a skilled and experienced Public Key Infrastructure (PKI) Professional with a strong focus on Certificate Lifecycle Management to join our Global Security team in Vancouver, BC. This role is critical to maintaining the security and integrity of our digital landscape by ensuring the reliable operation and robust security of our internal and external PKI services. The successful candidate will be responsible for the day-to-day management, maintenance, and enhancement of our PKI environment including Venafi TPP CLM platform, Microsoft CA, NDES and CEP/CES systems. This role will have a development and application support focus, experience in application and system development required.

WHAT WILL YOU DO?

• Manage the full Certificate Lifecycle: Oversee and execute all phases of certificate management, including request processing, generation, issuance, distribution, renewal, replacement, and timely revocation of various certificate types (SSL/TLS, S/MIME, code signing, client authentication, etc.).

• Enforce PKI Policies and Procedures: Ensure strict adherence to established PKI policies, Certificate Practice Statements (CPS), and Certificate Policy (CP) documents.

• Operate and Maintain PKI Infrastructure: Administer and maintain internal Certificate Authorities (CAs), Registration Authorities (RAs), and related components, including hardware and software.

• Troubleshoot and Resolve PKI Issues: Identify, diagnose, and resolve issues related to certificate validity, trust chains, revocation status (CRL, OCSP), key usage, and connectivity problems impacting PKI services.

• Contribute to PKI Design and Implementation: Participate in the design, planning, and implementation of new PKI solutions and enhancements based on evolving business needs and security requirements.

• Ensure PKI Security: Implement and monitor security controls to protect the PKI infrastructure, including securing CA private keys, managing access controls, and monitoring for suspicious activity.

• Maintain Compliance: Ensure the PKI environment meets internal security standards, industry best practices, and relevant regulatory requirements (e.g., privacy laws, industry-specific regulations).

• Key Management: Assist in the secure generation, storage, and management of cryptographic keys involving Hardware Security Modules (HSMs).

• Automate PKI Operations: Develop and implement scripts and tools to automate repetitive PKI tasks, such as certificate issuance, monitoring, and reporting, improving efficiency and reducing manual errors.

• Document PKI Processes: Create and maintain comprehensive documentation for PKI configuration, procedures, policies, and troubleshooting guides.

• Stay Current with PKI Trends: Keep abreast of the latest developments, vulnerabilities, and best practices in the PKI and cryptographic space.

WHAT DO YOU NEED TO SUCCEED?

Must have

• 5 years of experience in Information Technology, with a minimum of 3 years focused specifically on Public Key Infrastructure (PKI) administration and support.

• Deep expertise and hands-on experience with in Microsoft CA, NDES,OCSP and Venafi.

• Excellent troubleshooting skills and the ability to diagnose and resolve complex PKI issues.

• Strong communication skills, both written and verbal, with the ability to explain technical concepts clearly.

• Deep understanding of PKI concepts, including X.509 certificates, certificate chains, trust anchors

• Proficiency with SSL/TLS protocols and their application in securing web and network communications.

• Familiarity with relevant security standards and frameworks (e.g., NIST, ISO 27001) and compliance requirements.

• Experience with scripting languages (e.g., PowerShell, Python) for automating PKI-related tasks.

Nice-to-have:

• Certifications in Cyber Security (CISSP, CCSP etc.)

• Understanding of industry standards (IST 27001/2, NIST etc.)

• Venafi Certified Administrator (VSA) or Venafi Security Professional (VSP)
  

What’s in it for you?

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable

• Leaders who support your development through coaching and managing opportunities

• Ability to make a difference and lasting impact

• Work in a dynamic, collaborative, progressive, and high-performing team

• A world-class training program in financial services

• Flexible work/life balance options

• Opportunities to do challenging work

Job Skills

Certificate Services, Cron Job, Detail-Oriented, High Impact Communication, Power Shell Scripting, Problem Solving, Public Key Infrastructure, Security Standards, Transport Layer Security (TLS)

Additional Job Details

410 GEORGIA ST W, FLOOR 3:VANCOUVERVancouverCanada37.5Full timeTECHNOLOGY AND OPERATIONSRegularSalaried2025-08-082025-08-29

Note: Applications will be accepted until 11:59 PM on the day prior to the application deadline date above

Inclusion and Equal Opportunity Employment

At RBC, we believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.