Required skills
- Applied Cryptography
- PKI
- Certification Authorities
- User Certificate Lifecycle Management
- Device Certificate Lifecycle Management
- Hardware Security Modules (HSM)
- SafeNet Luna HSM
- Microsoft Active Directory Certificate Services
- certutil
- OpenSSL
- keytool
- Bash
- PowerShell
- RHEL
- Windows Server
Languages: German
Job description
Seeking an experienced Applied Cryptography Engineer to manage and operate an internal PKI infrastructure, focusing on internal Certification Authorities and the lifecycle of user and device certificates. The role also involves technical consulting and support for Hardware Security Modules (HSM).
Project overview
For our client in the Private Banking & Wealth Management sector, we are currently looking for an experienced Applied Cryptography Engineer.
To strengthen the existing team, an experienced Applied Cryptography Engineer is sought for the operation and support of the internal PKI infrastructure. The focus is on internal Certification Authorities and the entire lifecycle of user and device certificates. Additionally, the project includes technical consulting and support for Hardware Security Modules (HSM).
Responsibilities
- Operation and management of internal Certification Authorities
- Responsibility for the lifecycle of user certificates from issuance and distribution to renewal and revocation
- Support for technologies and self-service processes for the lifecycle of device certificates
- Support and troubleshooting for certificates, smart cards, and associated PKI technologies
- HSM consulting for Application Owners and support with HSM migrations
Requirements
- Profound experience with Microsoft Active Directory Certificate Services and the lifecycle management of user and device certificates
- Hands-on experience with certutil, OpenSSL, and keytool, as well as Windows GUI and CLI tools for Certificate Management
- Experience with HSM systems and Secret Management, particularly SafeNet Luna HSM Client including configuration and troubleshooting
- Knowledge of Keyon true-Xtender, Intercede MyID, and Smart Card issuance, support, and troubleshooting, as well as good Bash and PowerShell skills with experience in RHEL and Windows Server
- Language skills: English (fluent/business fluent in spoken and written)
- Experience in project management
- Language skills: German (fluent/business fluent in spoken and written)
Project details
ASAP
6 months (total 180 person-days)
Utilization: 4-5 days/week
1 day per week on-site in Zurich (always Wednesdays), rest remote
- Start: ab sofort
- Duration: 6 Monate
- Remote: hybrid
- Location: Zürich, Schweiz, CH
- Languages: German
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on FreelancerMap CH