BMW Group is hiring a PKI Architect

BMW Group is looking for a PKI Architect to take on a central role implementing our Zero Trust initiative. You will develop and operate innovative global Public Key Infrastructure (PKI) solutions, modernizing the architecture to create future-proof and highly secure IT systems.

What You'll Do

• Build, operate, and further develop the global Public Key Infrastructure (PKI) with on-premises Hardware Security Modules (HSMs).
• Modernize the PKI architecture and consistently align it with Zero Trust requirements.
• Work in dialogue with internal specialist departments, IT security managers, and external service providers to develop new strategies for PKI use cases.
• Perform security-relevant processes such as on-site root key ceremonies using the four-eyes principle.
• Work in an environment with open communication, mutual support, and high personal responsibility.

What We're Looking For

• Completed training as a Fachinformatiker:in or comparable qualification.
• Several years of experience in IT Security and Security Architecture with comprehensive knowledge in Public Key Infrastructure (PKI), ideally with a Microsoft PKI focus.
• Experience in securing Active Directory Certificate Services (AD CS), preferably in large enterprise environments.
• Extensive knowledge in PKI architecture & certificate management (X.509, PKCS) and experience in post-quantum strategies.
• Negotiation-level German and English language skills, both spoken and written.

Nice to Have

• Knowledge of PKI services such as certificate lifecycle management tools.
• Experience with infrastructure automation using Terraform, PowerShell, and/or Ansible.
• Knowledge of other Infrastructure as Code (IaC) approaches.

Technical Stack

• Public Key Infrastructure (PKI)
• Hardware Security Modules (HSMs)
• Microsoft PKI, Active Directory Certificate Services (AD CS)
• X.509, PKCS
• Terraform, PowerShell, Ansible

Benefits & Compensation

• Challenging projects shaping the mobility of tomorrow.
• Diverse personal and professional development opportunities.
• Attractive, fair, and performance-based compensation.
• High job security.
• Annual special payments such as holiday pay, Christmas bonus, and profit sharing.
• Flexible working time arrangements including 6 weeks annual vacation and overtime compensation.
• Discounted BMW & MINI conditions.

Work Mode

This is an onsite position.

We at the BMW Group place great value on equal treatment and equal opportunities. Our recruiting decisions are based on personality, experience, and skills.