Lead PKI & Cryptography Engineer - Cyber Security
Description
Role & responsibilities :
Technical Operations :
- Operate and maintain multi-tier PKIs (Corporate, specialized and Microsoft).
- Manage certificate lifecycle processes (issuance, renewal, CRL/OCSP, templates, enrolment methods).
- Properly manage keys according to regulations and industry standards.
- Support Certificate use cases in applications managed by other teams and business units.
- Coordinate with the InfoSec team to manage vulnerability remediation and ensure compliance with security standards.
Service Excellence & Governance :
- Ensure PKI services meet strict availability, reliability and security defined by SLA.
- Follow ITIL processes for incident, problem and change management.
- Participate in risk assessments, compliance checks, audits, pen-tests and overall governance activities.
- Produce and maintain operational procedures, documentation and audit evidences.
- Track and improve PKI related KPIs.
Customer Focus :
- Act as a point of contact for application issues.
- Provide support to application teams integrating certificate-based authentications.
- Provide guidance for cryptographic concepts for non-expert customers.
- Ensure secure certificate usage and best practices across the organization.
People & Team :
- Collaborate closely with IAM, Cybersecurity, Infrastructure and DevOps teams when needed.
- Participate in teams working mode events like daily meetings, sprint plannings and spring review.
- Contribute to documentation, knowledge sharing and operational excellence.
Qualifications & Experience :
- Bachelors / Masters degree in Computer Science, Information Technology, or related field.
- 6+ years of experience in PKI, cryptography or certificate lifecycle management.
- Hands-on experience with Microsoft ADCS or non-Microsoft PKI.
- Strong knowledge of Crypto Key Management.
- Knowledge using tools like Powershell or Python, YAML, Git and CI/CD.
- Good understanding of Windows Server, Linux, networking and TLS protocol.