{"id":3224784,"url":"https://alion.io/job/alstom-pki-cybersecurity-architect","title":"PKI cybersecurity architect","company":{"id":445391,"name":"Alstom","domain":"alstom.com","url":"https://alion.io/company/alstom","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"HeadHunter","truth_index":{"grade":"A","score":94,"open_postings":5,"ghost_share":0,"stale_share":0,"repost_share":0.4,"time_to_fill_p50_days":26,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":22000,"max_usd":53000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":724},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"PKI","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-25T02:30:30Z","employer_posted_date":null,"last_verified_at":"2026-10-25T02:30:30Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Req ID:529386\n\nAt Alstom, we understand transport networks and what moves people. From high-speed trains, metros, monorails, and trams, to turnkey systems, services, infrastructure, signalling and digital mobility, we offer our diverse customers the broadest portfolio in the industry. Every day, more than 80 000 colleagues lead the way to greener and smarter mobility worldwide, connecting cities as we reduce carbon and replace cars.\n\nOT PKI Architect\nRole Summary\nThe OT PKI Architect is responsible for designing, implementing, and governing Public Key Infrastructure (PKI) solutions that secure Operational Technology (OT) environments. The role focuses on certificate lifecycle management, identity and trust services, device authentication, secure communications, and compliance across industrial control systems, manufacturing facilities, and critical infrastructure.\nThe architect works closely with OT engineers, cybersecurity teams, enterprise PKI teams, Project Cyber managers, bid manager and vendors to ensure secure and resilient certificate-based security solutions.\nKey Responsibilities\nPKI Architecture & Design\nDesign and maintain enterprise and OT PKI architectures.\nDefine certificate hierarchy, trust models, Certificate Authority (CA) structures, and security controls.\nEstablish offline root CA and issuing CA strategies for OT environments.\nDevelop certificate policies (CP) and certificate practice statements (CPS).\nEnsure high availability and disaster recovery for PKI services.\nOT Security Integration\nIntegrate PKI solutions with: Signalling systems\nTurnkey systems\nDistributed Control Systems (DCS)\nIndustrial Control Systems (ICS)\n\nSecure machine-to-machine (M2M) communications.\nImplement mutual TLS (mTLS) authentication for industrial applications.\nSupport Zero Trust initiatives within OT environments.\nCertificate Lifecycle Management\nDesign automated certificate enrolment and renewal processes.\nImplement certificate discovery and inventory management.\nManage certificate issuance, renewal, revocation, and replacement.\nReduce certificate-related outages through proactive monitoring.\nSecurity Governance & Compliance\nDefine PKI standards, policies, and operational procedures.\nEnsure compliance with: IEC 62443\nNIST Cybersecurity Framework\nISO 27001\nIndustry-specific regulations\n\nConduct security risk assessments and architecture reviews.\nTechnical Leadership\nLead PKI-related projects and transformation initiatives.\nProvide technical guidance to OT and cybersecurity teams.\nEvaluate PKI and certificate management technologies.\nEngage vendors and third-party partners on solution design.\nIncident & Operational Support\nSupport incident investigations involving certificates and cryptographic services.\nTroubleshoot PKI-related issues in OT environments.\nSupport certificate recovery and business continuity plans.\nRequired Qualifications\nEducation\nBachelor's degree in: Computer Science engineering\nCybersecurity\nInformation Technology\nElectronics Engineering\n\nExperience\n7+ years in Cybersecurity, PKI\nExperience designing enterprise-grade PKI solutions.\nExperience with critical infrastructure or industrial environment\nTechnical Skills\nPKI & Cryptography\nMicrosoft ADCS(Must have)\nEJBCA (Must have)\nDigiCert PKI Platform (Nice to have)\nEntrust PKI (nice to have)\nKeyfactor (nice to have)\nVenafi (nice to have)\nOpenSSL\nCryptographic Knowledge\nX.509 certificates\nTLS / SSL\nMutual TLS (mTLS)\nRSA\nHashing algorithms\nHSM technologies\nOT Security Knowledge\nIEC 62443\nNIST SP 800-82\nIndustrial networking protocols\nInfrastructure\nWindows Server\nLinux\nActive Directory\nAzure PKI services\nCloud security integrations\nPreferred Certifications (nice to have)\nCISSP\nCCSP\nGIAC GICSP\nGIAC GRID\nSecurity+\nMicrosoft Security Certifications\nISA/IEC 62443 Cybersecurity Expert\nGlobal Industrial Cyber Security Professional (GICSP)\nKey Competencies\nEnterprise Architecture\nSecurity Design\nRisk Assessment\nStakeholder Management\nProblem Solving\nTechnical Leadership\nCommunication Skills\nProject Management\nWorks Closely With:\nPKI Service Managers\nOT Security Engineers\nSOC Teams\nBID Technical manager\nYou don't need to be a train enthusiast to thrive with us. We guarantee that when you step onto one of our trains with your friends or family, you'll be proud. If you're up for the challenge, we'd love to hear from you!\n\nAdditionally, in the face of environmental challenges, many employees are choosing to cycle for their commute. To support this approach, the Saint-Ouen site has suitable infrastructure (secure parking, maintenance and inflation stations, lockers, etc.).\n\nImportant to note\nAs a global business, we're an equal-opportunity employer that celebrates diversity across the 63 countries we operate in. We're committed to creating an inclusive workplace for everyone.","description_format":"text","description_chars":4811,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Rail Transport","Digital Signature"],"lifecycle":[{"event":"open","at":"2026-10-25T05:10:26Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":26,"reasons":["seen:2","velocity","win:early"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/alstom-pki-cybersecurity-architect","json_url":"https://alion.io/job/alstom-pki-cybersecurity-architect.json","meta":{"generated_at":"2026-10-27T10:35:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12223,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":445391},"rest":"https://alion.io/mcp/rest/get_company?id=445391"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Falstom-pki-cybersecurity-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Falstom-pki-cybersecurity-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Falstom-pki-cybersecurity-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/alstom-pki-cybersecurity-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Falstom-pki-cybersecurity-architect"}]}