IT Risk and Security Engineer (PKI-Certificate Management)

About the job IT Risk and Security Engineer (PKI-Certificate Management)


Location: Jersey City, Tampa Dallas, TX

Skills: Information Security, PKI, Cryptography, onPremise, Cloud, Python, Agile, Kanban, Jenkins, Chef

JOB DESCRIPTION:

• The Cybersecurity Services domain protects from cybersecurity risks through world class security architecture, engineering, and governance practices.
• Enterprise Certification Management Services (ECMS) team under Cybersecurity Services drives and improves Public Key Infrastructure (PKI) and certificate management across the entire DTCC technology estate.
• The ECMS team partners with other technology teams to design and implement PKI automation and standard methodology across the company.
• The successful candidate is someone who has solid attention to detail, as well as motivation to collaborate and share their technical knowledge around automation and security standard methodologies.
• The main focus areas for the ECMS team are:
• Ensures accurate inventory of the certificates in use in our environment.
• Creates and manages automation and workflows relevant for certificate management.
• Supports technology teams across DTCC for all aspects of certificate life-cycle management (Discovery, Generation, Distribution, Rotation and Revocation)

RESPONSIBILITIES:

• Design processes and workflows for generation, rotation and revoking certificates.
• Document PKI and certificate management guidance for the company
• Identify automation opportunities for certificate lifecycle.
• Acts as the domain specialist to help guide and shape how certificate management services are enabled.
• Design new certificate management services, integrations, and technologies

QUALIFICATIONS:

• Bachelor's degree required with Masters, or equivalent experience preferred.
• Minimum of 3-5 years of related experience
• Strong Information Security experience, specifically in PKI/Cryptography (on premise or cloud)
• Solid experience with Python
• Solid experience in networking fundamentals, OS (Windows/Linux) security
• Agile & Kanban methodologies
• Working knowledge of Jenkins and Chef would be a great plus.