Senior Trust Security Architect - PKI / Certificate / Key Management

Project overview

For a long-term project with our client in Zurich (remote share only possible within Switzerland), we are looking for a Senior Trust Security Architect (m/f/d) - PKI / Certificate / Key Management.

Further Framework Data

Type of engagement:

Utilization: 100%

Industry: Banking

Responsibilities

Must-Have Requirements

Nice-to-Have Requirements

Further Information

Let’s power the future together

From business case to implementation: As a leading consulting firm for strategic transformations, we are a trusted partner for our clients - and for our employees. Responsible, high-performing, and always with a focus on people. #WeAreWavestone

With our 360° portfolio of consulting services, we combine first-class industry expertise with a broad spectrum of cross-industry competencies, work interdisciplinarily, and think outside the box. We can thus offer our partner companies and freelancers comprehensive perspectives within our own projects and, as a long-standing framework agreement partner, support them in filling project vacancies – promptly and directly.

We look forward to hearing from you!

Your direct contact at Wavestone

Vivek Kandiah

Phone: *

Email: *@*.eu

• Design and further develop the security architecture in the area of trust management with a focus on PKI, credential, certificate, and key management
• Develop end-to-end target architectures for central trust services, incorporating applications, platforms, identities, networks, cloud, and infrastructure components
• Define integration patterns and interfaces for the consistent and secure use of certificates, credentials, and cryptographic keys across different systems and platforms
• Translate security, compliance, and regulatory requirements into technical architecture specifications and establish architecture principles, standards, and technological guardrails
• Advise engineering, platform, security, and application teams on design and technology decisions and support the implementation of Security by Design in hybrid environments
• Several years of experience as a Security/PKI Architect or in a comparable senior-level role (5-8 years), as well as the ability to structure complex technical issues, defend architectural decisions, and bring together different stakeholders
• Profound knowledge of PKI architectures, X.509 certificates, Certificate Lifecycle Management, key management, and HSMs, as well as relevant cryptographic methods and protocols
• Ability to develop overarching architectural concepts and target architectures for central trust services, incorporating applications, platforms, identities, networks, cloud, and infrastructure components, as well as defining interfaces and integration patterns
• Demonstrable experience in the design and integration of central trust management services, including PKI, credential, and key management, in complex hybrid and/or cloud-based IT landscapes
• Ability to translate security, compliance, and regulatory requirements into concrete technical architecture specifications, standards, and guardrails, and to apply relevant standards, best practices, and guidelines in the field of cryptography and trust services
• Experience in technical governance, including the establishment of architecture principles, standards, and technological guardrails, as well as advising engineering, platform, security, and application teams on design and technology decisions
• Ability to ensure Security by Design consistently in hybrid environments
• Open personality with a quick grasp of concepts
• Fluent German and English skills, both written and spoken
• Experience with trust management transformations in regulated industries, particularly in the financial industry, and/or with post-quantum-relevant adjustments to PKI and key management architectures
• Engagement duration: November 2026 to February 2028 with an option for extension
• Workload: 100%
• Location: Zurich & Remote (only possible within Switzerland)
• per week

Project details

• Start: flexible
• Duration: 14 Monate
• Remote: hybrid
• Location: Zürich, Schweiz, CH
• Languages: German