Public key infrastructure (PKI) Engineer

Job Summary-

The primary purpose of this position is to establish the Public key infrastructure (PKI) service built and provide operational support.  This includes operations, maintenance and troubleshooting all components of the PKI infrastructure and its dependencies. It will also require the creation of support operational guidelines, policies, and procedures for incident, problem and change management in adherence with CPI process.

Major Responsibilities

Design, Implement and Oversee the PKI Infrastructure.

Develop testing procedures, run tests and approvals, ensure quality and integrate the system into the

future environment.

Setting up technical solutions regarding certificate services.

Respond to customer queries and issues.

Software development support related to Public Key Infrastructure (Dogtag CA), Identity Provider (SAML, OAUTH).

Develop Infrastructure solutions for PKI Service (VMWare, ESXI, AWS, KVM).

Regular service monitoring and improvement

Provide hands on engineering support required to build and maintain internal and external PKI systems.

Maintain documentation, assist customers through FAQ entries and similar.

Create, maintain and align the company’s security policies and standards with industry best practices.

Represent the company on project teams and ensure adherence to existing security policies and standards and prepare for anticipated needs.

Development of technical security strategies related to PKI infrastructure.

Development of technical security architectures related to PKI infrastructure.

Development of technical security standards related to PKI infrastructure.

Educational & Professional Qualifications 

University degree in Engineering or related areas.

Experience

3 to 5 years of PKI, VMWare, OS administration experience. Good to have knowledge on programming languages like Java, GO, C# etc. Good to have database administration experience along with networking and AWS knowledge. Good to have knowledge on Single Sign On concepts based on SAML and Oauth protocol.

Technical Skills Requirements  

Profound knowledge on PKI, 389 LDAP and OS administration.

Profound knowledge on PKI concepts like CA, RA, OCSP, SCEP, HSM etc.

Profound knowledge on VMware and its concepts.

Profound knowledge on Security standards.

Good technical understanding with programming languages such as: C, C++, Python, Ruby, .NET/PowerShell, Java/JavaScript or other related languages will be an added advantage.

Good understanding of Single Sign On technologies such as SAML and OAUTH.

Experience in cryptographic library like OpenSSL.

Experience in webserver technologies like Tomcat, Apache etc.

Good experience with Database administration, AWS and networking concepts.

Good understanding on Active Directory infrastructure is an advantage.

Competence to manage tasks in demanding and unfamiliar situations with problem solving skills based on practice.

Excellent written, verbal and presentation skills.

Superior problem solving and troubleshooting skills.

Good organizational skills.

Proficient in working with high availability environment along with alignment to Agile methods.

Functional/Domain Knowledge 

Good-to-have:

Experience with Monitoring tools like Nagios, Grafana etc.

Experience with service now ticketing tool.

Good knowledge to troubleshoot issues onwindows client machines.

Understanding on HAproxy concepts.

Industry relevant certification.