PKI Cybersecurity Architect
Posted 25 Sep 2026
Advertised as “PKI cybersecurity architect”
BranchFactor Summary
The original posting with the fluff stripped out
- Expected experience
- 7+ yrs
- Management level
- Individual contributor
No salary listed for this role.
Field of studyComputer Science, Cybersecurity, Electronics Engineering, Engineering, Information Technology
Study levelBachelor's
CertificationsCISSP, CCSP, GIAC GICSP, GIAC GRID, Security+, ISA/IEC 62443 Cybersecurity Expert, Global Industrial Cyber Security Professional (GICSP)
Req ID:529386
At Alstom, we understand transport networks and what moves people. From high-speed trains, metros, monorails, and trams, to turnkey systems, services, infrastructure, signalling and digital mobility, we offer our diverse customers the broadest portfolio in the industry. Every day, more than 80 000 colleagues lead the way to greener and smarter mobility worldwide, connecting cities as we reduce carbon and replace cars.
OT PKI Architect
Role Summary
The OT PKI Architect is responsible for designing, implementing, and governing Public Key Infrastructure (PKI) solutions that secure Operational Technology (OT) environments. The role focuses on certificate lifecycle management, identity and trust services, device authentication, secure communications, and compliance across industrial control systems, manufacturing facilities, and critical infrastructure.
The architect works closely with OT engineers, cybersecurity teams, enterprise PKI teams, Project Cyber managers, bid manager and vendors to ensure secure and resilient certificate-based security solutions.
Key Responsibilities
PKI Architecture & Design
- Design and maintain enterprise and OT PKI architectures.
- Define certificate hierarchy, trust models, Certificate Authority (CA) structures, and security controls.
- Establish offline root CA and issuing CA strategies for OT environments.
- Develop certificate policies (CP) and certificate practice statements (CPS).
- Ensure high availability and disaster recovery for PKI services.
OT Security Integration
- Integrate PKI solutions with:
- Signalling systems
- Turnkey systems
- Distributed Control Systems (DCS)
- Industrial Control Systems (ICS)
- Secure machine-to-machine (M2M) communications.
- Implement mutual TLS (mTLS) authentication for industrial applications.
- Support Zero Trust initiatives within OT environments.
Certificate Lifecycle Management
- Design automated certificate enrolment and renewal processes.
- Implement certificate discovery and inventory management.
- Manage certificate issuance, renewal, revocation, and replacement.
- Reduce certificate-related outages through proactive monitoring.
Security Governance & Compliance