Certificate managementengineering, focused onautomated certificate management, deployment, renewal in various clients, applications operating systems;cryptographic protocolsand controls, including but not limited to, post-quantum cryptography, PKI solutions, and strategic vendor interaction. 

Thecandidate’s responsibilitieswill also includeworking with advanced mathematical algorithmswithinPKITheengineerwill participant indevice and usercertificatemanagementfocusing oncertificatelifecycleautomationprojects in Citi, includingcertificate automation for microservices, desktops, servers, WindowsUnix hosts,network securitydevicesand otherappliances.

Responsibilities:

• The candidate's primary responsibility will be todesign and introduce enterprise level certificate automation processes and solutions,which will include working on PKI architecturesas well.

• The candidate must have experience with PKI andagoodunderstanding of cryptography, includingthe principles related to PKI, private keys, encryption methods, CRL, and advanced key usages.

• Work with all disciplines, engineers, and operational product owners to integrate PKI and certificate management related technologies with Citi platforms to protect and manage the cryptography of mission critical systems. 

• Perform product evaluation, testing and certification of PKI and Crypto technologies. Ensure that all security products meet or exceed Citi internal and regulatory requirements. 

• Provide occasional 4th level support for the product toolset. 

• Produce documentation of processes and procedures for the usage of the product. 

• Follow the Technology Development Life Cycle in the development of all security tools.​

Qualifications:

• Strong solid experience in cryptography,crypto protocols/algorithmsand peripheral technologies isrequired

• Must be familiar with information security concepts, bestpracticesandsolutions 

• Must have a strongengineerbackground

• Database knowledge, preferably MSSQL and scripting background, preferablyPowershellisrequired

• Experience withcommercial Certificate Authority (CA)products and/orcertificate management systemsis a plus.

• Understanding of Microsoft Windowsand Unixoperating systems

• Sound security engineering principles as background to understanding the inner workings of the systems and controls that form an enterprise security ecosystem

• Understanding of symmetric key encryptionand asymmetricencryption

• Experience with a variety of HSM platformsis a plus

• Working with Trust Providers is a plus.

​

Education:

• Bachelor’s degree/University degree or equivalent experience

• Master’s degree preferred

• Information Security Certification(s)