Principal Cybersecurity – PKI Strategy Lead

Job Description:

This position requires office presence of a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered.

Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency, enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won't just imagine the future-you'll create it.

The Principal Cybersecurity – PKI Strategy Lead will be responsible for designing, engineering, and maintaining a scalable, secure, and compliant Public Key Infrastructure (PKI) environment. This role is critical to AT&T's ability to protect sensitive data, enable secure authentication, and support enterprise-wide encryption initiatives. The ideal candidate will bring over 8 years of experience in PKI and cryptographic systems, with a proven track record of leading enterprise-scale implementations and driving strategic security initiatives. 

Key Roles & Responsibilities 

• PKI Architecture & Strategy
  • Design and lead the implementation of scalable PKI architectures, including root, intermediate, and issuing CA hierarchies. 
  • Define and maintain Certificate Practice Statements (CPS) and ensure alignment with enterprise security policies
• Certificate Lifecycle Management
  • Oversee certificate issuance, renewal, revocation, and automation across public and private environments. 
  • Integrate certificate management with platforms such as DigiCert, KeyFactor, and internal tools 
• Cryptographic Governance
  • Ensure compliance with NIST, FIPS 140-2, ISO 27001, and internal standards. 
  • Lead cryptographic agility efforts, including readiness for post-quantum cryptography
• Infrastructure & Automation
  • Automate PKI operations using Python, PowerShell, Bash, and tools like Ansible and Terraform. 
  • Integrate PKI with CI/CD pipelines and DevSecOps workflows 
• Cloud & Identity Integration
  • Architect PKI solutions for hybrid and multi-cloud environments (AWS, Azure, Akamai, F5). 
  • Enable secure identity integration with IAM, SSO, and MFA systems

Required Skills & Experience 

• 8+ years of experience in PKI, cryptography, and cybersecurity architecture. 
• Deep knowledge of X.509, CRLs, OCSP, CA hierarchies, and trust models. 
• Strong scripting and automation skills (Python, PowerShell, Bash). 
• Experience with certificate management platforms and cloud-native security. 
• Proven ability to lead enterprise-scale security programs and influence policy. 

Preferred Certifications 

• CISSP, CISM, or equivalent 
• Microsoft Azure Security Engineer Associate (AZ-500) 
• AWS Certified Security – Specialty 
• DigiCert Digital Trust Solutions Engineer or equivalent PKI certification 

Supervisor:

No

Our Principal Cybersecurity earns between $141,300-$211,900 USD Annual, not to mention all the other amazing rewards that working at AT&T offers. Individual starting salary within this range may depend on geography, experience, expertise, and education/training.

Joining our team comes with amazing perks and benefits:  

• Medical/Dental/Vision coverage
• 401(k) plan
• Tuition reimbursement program
• Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
• Paid Parental Leave
• Paid Caregiver Leave
• Additional sick leave beyond what state and local law require may be available but is unprotected.
• Adoption Reimbursement
• Disability Benefits (short term and long term)
• Life and Accidental Death Insurance
• Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
• Employee Assistance Programs (EAP)
• Extensive employee wellness programs
• Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone.

#LI-Onsite – Full-time office role-

 AT&T is leading the way to the future – for customers, businesses, and the industry. We're developing new technologies to make it easier for our customers to stay connected to their world. Together, we've built a premier integrated communications and entertainment company and an amazing place to work and grow. Team up with industry innovators every time you walk into work, creating the world you always imagined. Ready to #transformdigital with us?

Apply now

Weekly Hours:

Time Type:

Location:

Salary Range:

It is the policy of AT&T to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, AT&T will provide reasonable accommodations for qualified individuals with disabilities. AT&T is a fair chance employer and does not initiate a background check until an offer is made.