PKI Infrastructure Specialist

At Uni Systems, we are working towards turning digital visions into reality. We are continuously growing, and we are looking for a PKI Infrastructure Specialist to join our UniQue team.

What will you be bringing to the team?

• Lead the design, implementation, and continuous improvement of enterprise PKI solutions, including Certificate Authorities (CAs), Registration Authorities (RAs), and Hardware Security Modules (HSMs).
• Define and enforce PKI security policies, standards, and best practices.
• Develop a strategic roadmap for PKI evolution, including cloud-based cryptographic services and post-quantum cryptography readiness.
• Install, configure, and maintain the day-to-day wide PKI systems, components, and virtualized infrastructure.
• Install, configure, and maintain NPKI networking components, hardware infrastructure, LDAP directory service, and support HTTP service.
• Responsible for Enterprise Mobile Mobility and LDAP directory service configuration, integration, and maintenance.
• In charge of the Online Certificate Status Protocol (OCSP) and Time Stamp management.
• Responsible for Database maintenance, dedicated to NPKI.
• Manage, deploy, and integrate the Card Management System.
• Upgrade and manage the HSM firmware.
• Responsible for the creation of PKI-related guidance.
• In charge of the Certificate Authority Log analysis, (Troubleshoot the system ALARM/ERRORS and monitor user activity).
• Support the Smart Card enrolment and certificate creation process.
• Maintain the day-to-day operations/management /backup/restore of the PKI systems.
• Provide technical support and assistance to ITM Operating Authorities and NPKI-Mitigation project team.
• Provide 2nd- and 3rd-level technical support for CIS services to NPKI customers.
• Design new PKI components and install and maintain NPKI components.
• Responsible for the creation and maintenance of Standard Operating Procedures.
• Document all new PKI services.

Requirements

What do you need to succeed in this position?

• Bachelor's degree
• 5 years of extensive experience with PKI System development, design, and management.
• Extensive knowledge of modern communication and Internet Protocol (IP) based networking technologies and systems, including security aspects.
• Extensive knowledge of Information Security and Cryptography (symmetric and asymmetric encryption, public key infrastructure (PKI) encryption, public key encryption, hash functions, digital signatures, digital certificates).
• Ability to define and execute PKI strategies at an enterprise level.
• Working knowledge of router and switch configuration.
• Practical experience in Windows Servers, RHEL, and VMware system administration.
• Knowledge of the principles of computer and communications security, networking, and vulnerabilities of modern operating systems and applications.
• Experience with SQL database administration.
• Extensive experience in operating systems, backup, and restore.
• Practical experience with scripting (Python, PowerShell).
• Hands-on experience with SSL, TLS, and OpenSSL.
• Strong analytical and problem-solving skills with a risk-based approach to security.
• Excellent communication skills to engage both technical and executive stakeholders.
• Experience in mentoring teams and driving security best practices across project teams.
• Desirable Experience with VMware (VCA, VCP) and Linux RHEL system administration and CISCO CCNA.
• Certifications such as Microsoft Certified Solution Associate (MCSA), Microsoft Certified Solutions Expert (MCSE) would be a plus.
• Flexibility to work outside normal office hours in response to crises, operational requirements.
• Excellent use of the English language (verbal & written).

At Uni Systems, we are providing equal employment opportunities and banning any form of discrimination on grounds of gender, religion, race, color, nationality, disability, social class, political beliefs, age, marital status, sexual orientation, or any other characteristics. Take a look at our Diversity, Equality & Inclusion Policy for more information.