KPMG Green Card Visa Sponsorship Jobs USA
KPMG is one of the most active Green Card sponsors in the accounting and professional services industry, regularly supporting permanent residency for professionals in audit, tax, advisory, and technology roles. For skilled workers looking to build a long-term career in the U.S., KPMG represents a strong and well-established sponsorship path.
Find KPMG JobsOverview
Showing 5 of 1,083+ KPMG Green Card Visa Sponsorship Jobs USA
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
See all 1,083+ KPMG Green Card Visa Sponsorship Jobs USA
Sign up for free to unlock all listings, filter by visa type, and get alerts for new KPMG Green Card Visa Sponsorship Jobs USA.
Get Access To All JobsJob Specification: Senior PKI (Public Key Infrastructure) and Cryptography Engineer
Job Overview
- We are seeking a Senior PKI and Cryptography Engineer to design, implement, and operate enterprise certificate and cryptographic services across our hybrid, multi-cloud environment.
- The role owns secure, full lifecycle certificate management — discovery, issuance, renewal, rotation, and revocation — and delivers integrations across cloud platforms, endpoints, network and security devices, and application stacks.
- This is a hands-on role for a self-starter who can scope and deliver complex initiatives independently, automate aggressively to eliminate manual toil, and partner across security, infrastructure, identity, and DevOps teams.
- You will set cryptographic standards, build the automation that enforces them, and shape a modern PKI program that supports both traditional infrastructure and cloud-native, zero-trust use cases.
- Act with integrity, professionalism, and personal responsibility to uphold the firm’s respectful and courteous work environment.
Key Responsibilities
- Architect and operate enterprise PKI services, including offline root, policy, and issuing CA tiers with HSM-backed key protection.
- Implement and manage full certificate lifecycle automation across cloud, on-premises, endpoint, and network domains.
- Deploy and operate certificate lifecycle management platforms such as Keyfactor and Venafi.
- Design strong authentication solutions using smart cards, YubiKey, and identity certificates for workforce, privileged users, and machine identities.
- Define and enforce cryptographic standards and key management policies aligned to NIST, FIPS, and applicable compliance frameworks.
- Lead incident response and remediation for certificate-related outages or compromise scenarios.
Experience Required
- 7+ years in cybersecurity or infrastructure engineering, with 4+ years focused on PKI and certificate management in large enterprise environments.
- Hands-on experience designing and operating multi-tier internal PKI (offline root, policy, issuing CAs) using Microsoft ADCS, EJBCA, or equivalent.
- Proven experience implementing certificate lifecycle automation via ACME, SCEP, EST, CMP, or REST APIs at scale.
- Strong experience with smart cards, YubiKey, and identity certificates (PIV, FIDO2/WebAuthn, certificate-based authentication).
- Experience integrating PKI with AWS, Azure, and GCP, plus endpoints, network devices, load balancers, and MDM platforms.
- Experience operating HSMs (Thales, Entrust, CloudHSM, Azure Managed HSM) with FIPS-aligned key ceremony and controls.
Preferred
- Hands-on experience with Keyfactor (Command, EJBCA) and/or Venafi (TLS Protect, Trust Protection Platform).
- Experience integrating PKI with DevOps toolchains (HashiCorp Vault, cert-manager, service mesh, CI/CD pipelines).
- Familiarity with regulated environments (NIST, FIPS 140-2/3, PCI-DSS, SOX) and crypto-agility / post-quantum readiness.
- Bachelor's degree in Computer Science, Information Security, or related discipline; CISSP, CISM, or GIAC certifications a plus.
Skills
- PKI and Cryptography: X.509, RFC 5280, certificate profiles, CRL/OCSP, CA/B Forum baseline requirements; RSA, ECDSA, AES, SHA-2/3, TLS 1.2/1.3, mTLS, S/MIME, code signing.
- Identity Certificates and Strong Authentication: Smart cards (PIV/CAC), YubiKey (PIV, FIDO2, OpenPGP), Windows Hello for Business, integration with Active Directory, Entra ID, and Okta.
- Certificate Lifecycle Management: Hands-on with Keyfactor and Venafi preferred, plus ACME, SCEP, EST, CMP, and REST-based enrollment workflows.
- Cloud and Platform Integration: AWS (ACM, Private CA, KMS), Azure (Key Vault, Managed HSM), GCP (CAS, KMS), Kubernetes cert-manager, and service mesh mTLS.
- DevOps and Automation: Terraform, Ansible, CI/CD pipelines (Jenkins, GitHub Actions, Azure DevOps), and Git-based workflows.
- Scripting and Programming: Proficiency in at least one of Python, PowerShell, Go, or Bash for tooling and API integrations.
Professional Skills: Self-starter with strong ownership and the ability to drive initiatives end-to-end
Pay Rate Range
60 - 120 USD hourly
Job Specification: Senior PKI (Public Key Infrastructure) and Cryptography Engineer
Job Overview
- We are seeking a Senior PKI and Cryptography Engineer to design, implement, and operate enterprise certificate and cryptographic services across our hybrid, multi-cloud environment.
- The role owns secure, full lifecycle certificate management — discovery, issuance, renewal, rotation, and revocation — and delivers integrations across cloud platforms, endpoints, network and security devices, and application stacks.
- This is a hands-on role for a self-starter who can scope and deliver complex initiatives independently, automate aggressively to eliminate manual toil, and partner across security, infrastructure, identity, and DevOps teams.
- You will set cryptographic standards, build the automation that enforces them, and shape a modern PKI program that supports both traditional infrastructure and cloud-native, zero-trust use cases.
- Act with integrity, professionalism, and personal responsibility to uphold the firm’s respectful and courteous work environment.
Key Responsibilities
- Architect and operate enterprise PKI services, including offline root, policy, and issuing CA tiers with HSM-backed key protection.
- Implement and manage full certificate lifecycle automation across cloud, on-premises, endpoint, and network domains.
- Deploy and operate certificate lifecycle management platforms such as Keyfactor and Venafi.
- Design strong authentication solutions using smart cards, YubiKey, and identity certificates for workforce, privileged users, and machine identities.
- Define and enforce cryptographic standards and key management policies aligned to NIST, FIPS, and applicable compliance frameworks.
- Lead incident response and remediation for certificate-related outages or compromise scenarios.
Experience Required
- 7+ years in cybersecurity or infrastructure engineering, with 4+ years focused on PKI and certificate management in large enterprise environments.
- Hands-on experience designing and operating multi-tier internal PKI (offline root, policy, issuing CAs) using Microsoft ADCS, EJBCA, or equivalent.
- Proven experience implementing certificate lifecycle automation via ACME, SCEP, EST, CMP, or REST APIs at scale.
- Strong experience with smart cards, YubiKey, and identity certificates (PIV, FIDO2/WebAuthn, certificate-based authentication).
- Experience integrating PKI with AWS, Azure, and GCP, plus endpoints, network devices, load balancers, and MDM platforms.
- Experience operating HSMs (Thales, Entrust, CloudHSM, Azure Managed HSM) with FIPS-aligned key ceremony and controls.
Preferred
- Hands-on experience with Keyfactor (Command, EJBCA) and/or Venafi (TLS Protect, Trust Protection Platform).
- Experience integrating PKI with DevOps toolchains (HashiCorp Vault, cert-manager, service mesh, CI/CD pipelines).
- Familiarity with regulated environments (NIST, FIPS 140-2/3, PCI-DSS, SOX) and crypto-agility / post-quantum readiness.
- Bachelor's degree in Computer Science, Information Security, or related discipline; CISSP, CISM, or GIAC certifications a plus.
Skills
- PKI and Cryptography: X.509, RFC 5280, certificate profiles, CRL/OCSP, CA/B Forum baseline requirements; RSA, ECDSA, AES, SHA-2/3, TLS 1.2/1.3, mTLS, S/MIME, code signing.
- Identity Certificates and Strong Authentication: Smart cards (PIV/CAC), YubiKey (PIV, FIDO2, OpenPGP), Windows Hello for Business, integration with Active Directory, Entra ID, and Okta.
- Certificate Lifecycle Management: Hands-on with Keyfactor and Venafi preferred, plus ACME, SCEP, EST, CMP, and REST-based enrollment workflows.
- Cloud and Platform Integration: AWS (ACM, Private CA, KMS), Azure (Key Vault, Managed HSM), GCP (CAS, KMS), Kubernetes cert-manager, and service mesh mTLS.
- DevOps and Automation: Terraform, Ansible, CI/CD pipelines (Jenkins, GitHub Actions, Azure DevOps), and Git-based workflows.
- Scripting and Programming: Proficiency in at least one of Python, PowerShell, Go, or Bash for tooling and API integrations.
Professional Skills: Self-starter with strong ownership and the ability to drive initiatives end-to-end
Pay Rate Range
60 - 120 USD hourly
Job Roles at KPMG
See all 1,083+ KPMG Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new KPMG roles.
Get Access To All JobsTips for Finding KPMG Green Card Jobs
Target roles with long-term project visibility
KPMG typically sponsors Green Cards for professionals in ongoing client-facing or technical roles. Audit, tax, and advisory positions with recurring engagements are more likely to lead to sponsorship than short-term or project-based assignments.
Understand KPMG's PERM-based sponsorship process
Most KPMG Green Card filings go through the PERM labor certification process. Expect your employer to conduct a formal recruitment audit before filing. Ask your recruiter early whether the role is structured for long-term sponsorship eligibility.
Ask about sponsorship during the offer stage
KPMG's HR and immigration teams handle sponsorship decisions at the offer level. Raise Green Card sponsorship directly during negotiations, waiting until after you've started can delay the process by months or even years.
Prioritize practice areas with high international talent demand
Tax advisory, forensic accounting, and technology consulting within KPMG tend to draw international talent who later pursue Green Cards. Roles in these practice areas at senior associate level and above are more frequently linked to sponsorship commitments.
Use verified sponsorship data to find the right openings
Not every KPMG job listing will mention Green Card sponsorship. Migrate Mate surfaces verified sponsors so you can filter by real sponsorship history, helping you focus on openings where KPMG has an established track record.
Build tenure before expecting Green Card initiation
KPMG generally begins the Green Card process after you've demonstrated strong performance and long-term fit within the firm. Consistent performance reviews and a clear internal promotion path signal that you're a candidate worth sponsoring for permanent residency.
KPMG Green Card Visa Sponsorship: Frequently Asked Questions
Does KPMG sponsor Green Card visas?
Yes, KPMG sponsors Green Card visas for qualified professionals across its U.S. practice areas. The firm has a consistent track record of supporting permanent residency for employees in accounting, audit, tax, and technology roles. Sponsorship is typically initiated after a period of employment and is tied to demonstrated long-term fit within the organization.
Which roles and departments at KPMG are most likely to receive Green Card sponsorship?
Green Card sponsorship at KPMG is most common in technical and specialized roles, including tax advisory, audit, forensic accounting, and technology consulting. Senior associates and managers with specialized credentials, such as CPAs or professionals with niche industry expertise, are frequently supported. Roles with ongoing client relationships and limited domestic talent supply tend to move through the process more reliably.
How does the Green Card application process work at KPMG?
KPMG typically sponsors Green Cards through the EB-2 or EB-3 employment-based preference categories using the PERM labor certification process. The firm's internal immigration team works with outside counsel to conduct the required recruitment steps and file the petition. Employees are generally kept informed throughout the process, though timelines depend heavily on the applicant's country of birth and current visa priority dates.
How long does Green Card sponsorship take at KPMG?
The timeline varies significantly based on your country of birth. For applicants born outside of high-backlog countries, the full process from PERM filing to Green Card approval can take two to four years. For applicants born in India or China, wait times under the EB-2 and EB-3 categories can stretch considerably longer due to per-country annual limits. Starting the process early in your tenure at KPMG is strongly advisable.
How do I find KPMG Green Card sponsorship jobs?
Start by searching KPMG's careers portal and filtering for roles in practice areas known for sponsoring international talent. For a more targeted approach, Migrate Mate lists verified Green Card sponsor employers and lets you filter openings by sponsorship type, making it easier to identify KPMG positions where sponsorship is a realistic expectation rather than a possibility you'd need to negotiate from scratch.
What is the prevailing wage for Green Card sponsorship at KPMG?
Employers sponsoring a Green Card through the PERM labor certification process must pay at least the prevailing wage for the role. The Department of Labor determines this rate based on the specific job title, location, and experience level. The prevailing wage is locked in during the PERM filing and applies through the entire Green Card process. You can look up current rates using the DOL's OFLC Wage Search tool.