GCS PKI Engineer, AVP

  • Blackrock
  • State Street
Job Description This is a technical position to evolve and consolidate PKI infrastructure throughout the enterprise.The PKI Engineer candidate will assist in the development of PKI solutions and day to day operations to meet security and business requirements. The PKI engineer candidate must possess an understanding of the concepts of cryptography such as Symmetric/asymmetric cryptography, Secure hash functions, Digital signatures and SSL/TLS. The candidate should possess strong understanding of security best practices.Responsibilities will include:Support and enhance company wide PKI services using current Certification Authorities (CAs) and Registration AuthoritiesMonitor for and Ensure timely renewal of expiring certificates Provide consulting and guidance to application teams around cryptographic technologiesTest, implement changes in the PKI Infrastructure Interface with vendors that provide security/encryption services to the companyAssist in the development and maintenance of system orchestration to automate day to day processesAssist in the development and maintenance of ad-hoc and automated data reporting as needed using vendor tooling or custom automation as appropriateCreating and maintaining documentation for technical and administrative functionsAssist in the development and maintenance of automation approaches to solve PKI lifecycle challengesAssist in the Integration of applications, infrastructure and third-party products into internal PKI servicesSkills/Knowledge Desired:Certificate Authority AdministrationCertificate Enrollment Web Service & Policy Web ServiceActive Directory Certificate Services (ADCS) monitoring. Data-in-motion EncryptionData-at-rest EncryptionStrong knowledge in Public Key Infrastructure (PKI) machine identity technologies such as SSH, SSL, TLS.Familiarity with Disaster Recovery process and Business Continuity procedures.Proficiency with a scripting language such as Java, Python or PowershellExperienced in database configuration and SQLExperience with workflow and API developmentExperience Desired3-5 years of experience working with PKI architecture3-5 years of System Administration of Windows, Unix/ Linux3-5 years of experience in infrastructure (security/systems/network) engineering and/or development3-5 years in technology and/or project management leadership positionsExperience developing executive-level reporting and communicationsExperience establishing and defining the scope of new teams or functionsExperience working in large complex environments (financial services a plus)Additional Locations