Job Description
Responsibilities will include:Support and enhance company-wide PKI services using current Certification Authorities (CAs) and Registration AuthoritiesDesign, implement orchestration and automation of enterprise certificate managementDesign, implement enterprise code signing servicesProvide consulting and guidance to application teams around cryptographic technologiesDesign secure vaulting solutions using Hardware Security Modules (HSM) and Key Management systems (KMS)Support Simple Certificate Enrollment Protocol (SCEP) serversDesign, test, implement changes in the PKI infrastructureInterface with vendors that provide security/encryption services to the companyLead the definition and implementation of POCs around PKI and other certificate-related technologiesDevelop and maintain system orchestration to automate day-to-day processesDevelop and maintain ad-hoc and automated data reporting as needed using vendor tooling or custom automation as appropriateCreate and maintain documentation for technical and administrative functionsEvolve the framework for system monitoring and develop tooling to automate notifications and generate reporting/metricsProvide guidance for scoping complex, cross-organizational projects as neededDevelop automation approaches to solve PKI lifecycle challengesAnalyze legacy PKI solutions for security gaps and develop new approaches/capabilities to mitigateDevelop standards and approaches to enable seamless integration across technical stacksPartner with architecture teams to understand security and business implications of PKI strategyAct as a technical owner on initiatives involving PKI technologiesChampion PKI capability and integration across core security and ITDevelop and deploy solutions to ensure that Digital Credential Services are performing according to specifications, meet defined procedures, and comply with applicable information security policies and requirementsIntegrate applications and third-party products into internal servicesSkills/Knowledge Desired:Certificate Authority AdministrationCertificate Enrollment Web Service & Policy Web ServiceActive Directory Certificate Services (ADCS) monitoringPKI as a service Data-in-motion Encryption Data-at-rest EncryptionExpertise in Public Key Infrastructure (PKI) machine identity technologies such as SSH, SSL/TLSFamiliarity with Disaster Recovery process and Business Continuity proceduresExperience in managing Key Management Systems (KMS)Ability to design and implement solutions that optimize systems and processesProficiency with a scripting language such as Java, Python, or PowershellExperience in database configuration and SQLExperience with workflow and API developmentAbility to organize and rationalize complex data setsExperience Desired:9+ years of experience working with PKI architecture9+ years of System Administration of Windows, Unix/Linux9+ years of experience in infrastructure (security/systems/network) engineering and/or development9+ years in technology and/or project management leadership positions9+ years experience developing executive-level reporting and communications9+ years experience establishing and defining the scope of new teams or functions9+ years experience working in large complex environments (financial services a plus)Job ID: R-749087 #J-18808-Ljbffr