We are seeking an experienced Director to lead our PKI and Certificate Services organization. In this role, you will be responsible for delivering enterprise-grade cryptographic services and certificate management solutions that enable secure communications across Amazon and customer environments. You will own the P&L, end-to-end strategy, execution, and operational excellence for certificate services at scale, during the industry's most significant transformation: the migration to post-quantum cryptography.



Key job responsibilities
Define and execute the long-term vision, strategy, and roadmap for PKI and Certificate Services
Drive business outcomes including growth, adoption, reliability, and customer satisfaction
Establish success metrics; own P&L accountability for the service portfolio
Oversee the design and delivery of cryptographic services across :
Public and private certificate authority (CA) infrastructure
Certificate lifecycle management (issuance, renewal, revocation)
Key management and HSM integration
TLS/SSL certificate automation and deployment
Code signing and identity certificate services
Ensure compliance with industry standards (WebTrust, CA/Browser Forum, NIST, FIPS)
Drive innovation in certificate automation, crypto-agility, and post-quantum readiness
Build, lead, and develop a high-performing organization of 100+ engineers and Product Managers
Foster a culture of operational excellence, security-first thinking, and customer obsession
Manage organizational health, performance, and career development
Ensure 99.99%+ availability and reliability of certificate services
Own incident response, root cause analysis, and continuous improvement processes
Establish and maintain security controls, audit readiness, and compliance posture
Drive automation to reduce toil and improve operational efficiency
Build relationships with external stakeholders including auditors, browser vendors, and industry bodies
Represent the organization in industry forums and standards bodies

About the team
The Identity, Cloud Governance, Certificate Services and PKI team is one of the most critical and foundational organizations within AWS. We own the services that enable customers to securely manage their AWS environments at scale: AWS IAM, IAM Identity Center, Access Analyzer, AWS Organizations, AWS Account, AWS Config, Control Tower, Private CA, ACM, Secrets Manager, Cognito, and Directory Services.

Our team is responsible for three core pillars that underpin every customer's AWS experience:
• Identity and Access Management: Enabling secure authentication and fine-grained authorization across AWS
• Cloud Governance: Providing customers with the tools to manage, organize, and govern their AWS environments at scale
• PKI and Certificate Services: Delivering cryptographic services and certificate management for secure communications