PKI Security Engineer

Must Have Technical/Functional Skills

\n

\n

\n Good working experience with scripting platforms (PowerShell, Batch, Json, Python, YAML, etc

\n

• \n
• )Expert in PKI design, implementation, administration, and provisioning in AWS. Extensive experience in AWS PKI services: KMS, CloudHSM, ACM, CloudFront, Secrets Manager, CloudTrai
• \n
• lExperience with PKI-based products (including Web servers and certification authorities) and Common PKI-based protocols (including SSL and TLS, HTTPs, or LDAPs)
• \n
• .A solid understanding of Public Key Infrastructure (PKI) including technology, standards, and implementations, with experience managing, configuring, or supporting a PKI certificate authorit
• \n
• yExperience with certificate authority (CA) implementation in compliance with the Federal PKI (FPKI) Common Policy Authority
• \n
• .Conduct technical research and set cloud security direction and strateg
• \n
• yExperience in automating certificate renewal and certificate life cycle management
• \n
• .Experience with Microsoft's PKI Technologies and latest Windows and Linux server platforms
• \n
• .Experience with integration of Venafi with Microsoft PKI Technologies and Public PKI Providers
• \n
• .Experience on IBM Mainframe platforms Encryption (TKE, UKO, SGKLM, etc)
• \n
• .Experience in areas such as identity management, provisioning, authentication, authorization, certification/governance, monitoring along, including HSPD-12 compliance
• \n
• .Experience developing and implementing IT Contingency Plans
• \n

\n

\n

.
\n Preferred Qualifications & Skill

\n

• \n
• s:Bachelor’s Degree in Information Security, Computer Science, or related fiel
• \n
• d.5+ years of professional experience in PKI, Venafi, digital certificates management, IBM-Mainframe, Scripting and Information Security domain
• \n
• s.Experience with Agile software development methodologie
• \n
• s.Preferred one or more certifications: CISSP, AWS Cloud Certificates, CISM or other Cyber Security related certificatio
• \n

\n

\n

n.
\n Roles & Responsibilit

\n

• \n
• iesSupport and mature PKI (Public Key Infrastructure) program, including strategy, governance, implementation, operations and continuous alignment with compliance and regulatory requiremen
• \n
• ts.Engage with system owners, business teams, and IT stakeholders in strategic discussions to provide best in class PKI security strategy and industry guidance to maximize long-term business objectiv
• \n
• es.High performing and self-motivated, extensive professional experience in designing, implementing and managing PKI and security solutio
• \n
• ns.Solid understanding of PKI concepts and security properti
• \n
• es.Support PKI-based products (including Web servers and certification authorities) and Common PKI-based protocols (including SSL and TLS, HTTPs, or LDAP
• \n
• s).Experience with certificate authority (CA) implementation in compliance with the Federal PKI (FPKI) Common Policy Authori
• \n
• ty.Review, patch, the Red Hat Certificate System source code for defec
• \n
• ts.Develop Red Hat Certificate System source code to implement new capabili
• \n
• ty.Strong expertise in PKI Engineering Support and troubleshooti
• \n
• ng.Experience with HSM design and implementati
• \n
• on.Working knowledge with OSI layer 2-7 security tactics and different kinds of attac
• \n

\n

ks.