Identity Architect

About Astellas

Astellas is a global life sciences company committed to turning innovative science into VALUE for patients. We provide transformative therapies in disease areas that include oncology, ophthalmology, urology, immunology and women's health. Through our research and development programs, we are pioneering new healthcare solutions for diseases with high unmet medical need. Learn more at Astellas.com.

Are you driven to make a real difference in the lives of patients?

We're seeking passionate individuals who thrive in dynamic environments, embrace new ideas, and aren't afraid to take intelligent risks. People who act with unwavering integrity and are deeply committed to making a tangible impact.

Purpose and Scope:

As an Identity Engineer, you will be responsible for designing, administering, supporting, and modernizing enterprise Public Key Infrastructure (PKI) services, including Certificate Authorities (CA), certificate lifecycle management, and cryptographic key management solutions. The role focuses on enhancing security, automating certificate operations, ensuring compliance, and delivering scalable certificate-based authentication and encryption services across on-premises, hybrid, and cloud environments.

Responsibilities and Accountabilities:

• Administer, maintain, and support enterprise Public Key Infrastructure (PKI) environments, including Microsoft Certificate Services (AD CS), Certificate Authorities (CA), Registration Authorities (RA), Online Responders, and certificate lifecycle management platforms.
• Manage certificate issuance, renewal, revocation, validation, and recovery processes for users, servers, applications, devices, and non-human identities.
• Design, implement, and maintain PKI architectures, certificate templates, certificate policies, trust hierarchies, and cryptographic standards aligned with business and security requirements.
• Support enterprise certificate lifecycle management solutions, automating certificate enrolment, renewal, discovery, inventory management, and compliance monitoring.
• Administer and maintain Hardware Security Modules (HSMs), cryptographic key management systems, key backup procedures, and secure key storage practices.
• Support digital certificate deployments across servers, applications, web services, databases, network devices, cloud services, VPNs, and authentication platforms.
• Implement and maintain certificate-based authentication solutions, including Smart Cards, FIDO, device certificates, Wi-Fi authentication, VPN authentication, and mutual TLS (mTLS).
• Monitor PKI infrastructure health, certificate expiration risks, cryptographic compliance, and security vulnerabilities to ensure continuous service availability.
• Perform PKI assessments, health checks, audits, security reviews, remediation activities, and modernization initiatives aligned with industry best practices.
• Support cloud-based PKI solutions, including Microsoft Cloud PKI, Azure Key Vault, and integrations with Microsoft Entra ID, Intune, and security platforms.
• Develop and maintain automation solutions using PowerShell and related scripting technologies to simplify certificate lifecycle management and operational activities.
• Maintain PKI documentation, operational procedures, governance standards, audit evidence, and compliance requirements supporting regulatory and security obligations.