Senior PKI Engineer – Certificate Services & Active Directory

About the role

Alcon is seeking a Senior PKI Engineer to lead the design, implementation and optimisation of Certificate Services and Active Directory within its IT Access & Identity team in Mexico City. The role focuses on securing user access across digital platforms and ensuring compliance with global security standards.

Key responsibilities

• Design and deploy robust Identity and Access Management (IAM) solutions, including PKI and certificate services.
• Develop, enforce and champion IAM policies across the organisation.
• Integrate PKI and Azure AD solutions with existing IT and security systems.
• Support risk assessments and remediate identified vulnerabilities.
• Identify automation opportunities and drive continuous improvement of IAM processes.
• Provide technical guidance and mentorship to team members.

Required profile

• Bachelor’s degree.
• 8‑10 years of relevant experience in IAM, PKI and Active Directory.
• Advanced level of English.

Required skills

• PowerShell scripting.
• Strong knowledge of Entra ID / Azure AD (2‑3 years).
• In‑depth experience with Active Directory.
• Expertise in PKI technologies such as MS‑PKI, DigiCert PKI, AWS certificates and Entra certificates.

What we offer

• Opportunity to join a growing, early‑stage organisation within a global leader in eye care.
• Diverse and inclusive work environment.
• Individual career development plan and potential growth.
• International collaboration with colleagues worldwide.
• Attractive benefits and compensation package.