Title:Info Security-PKI
Location - Remote to Start Client Based out from Irving TX or New Castle, DE
Looking for sound PKI, cryptography, crypto protocols/algorithms and Automation
Justification
An Engineering specialist is required to work on Certificate Automation engineering, maintenance and feature requests to resolve critical and time-sensitive Application and Development org requirements for Certificate management automation.
Responsibilities:
• The candidate's primary responsibility will be to design and introduce enterprise level certificate automation processes and solutions, which will include working on PKI architectures as well.
• The candidate must have experience with PKI and a good understanding of cryptography, including the principles related to PKI, private keys, encryption methods, CRL, and advanced key usages.
• Work with all disciplines, engineers, and operational product owners to integrate PKI and certificate management related technologies with Citi platforms to protect and manage the cryptography of mission critical systems.
• Perform product evaluation, testing and certification of PKI and Crypto technologies. Ensure that all security products meet or exceed Citi internal and regulatory requirements.
• Provide occasional 4th level support for the product toolset.
• Produce documentation of processes and procedures for the usage of the product.
• Follow the Technology Development Life Cycle in the development of all security tools.
Qualifications:
• Strong solid experience in cryptography, crypto protocols/algorithms and peripheral technologies is required.
• Must be familiar with information security concepts, best practices and solutions.
• Must have a strong engineer background
• Database knowledge, preferably MSSQL and scripting background, preferably Powershell is required.
• Experience with commercial Certificate Authority (CA) products and/or certificate management systems is a plus.
• Understanding of Microsoft Windows and Unix operating systems
• Sound security engineering principles as background to understanding the inner workings of the systems and controls that form an enterprise security ecosystem
• Understanding of symmetric key encryption and asymmetric encryption
• Experience with a variety of HSM platforms is a plus
• Working with Trust Providers is a plus.
Education:
• Bachelors degree/University degree or equivalent experience
• Masters degree preferred
• Information Security Certification(s)