PKI Architect

Project overview

As a PKI Architect, you will play a central role in the analysis, conception, further development, and implementation of complex Public Key Infrastructures. You will ensure that security-critical requirements from technical guidelines, tender documents, and existing system landscapes are translated into robust architecture and implementation concepts. You will examine the current state of the PKI environment, identify areas for optimization and change, and, together with relevant stakeholders, define a technically and organizationally viable target state.

From initial requirements gathering, through the evaluation and adaptation of high-level and low-level designs, to implementation, testing, and documentation, you will accompany the entire lifecycle of changes. You will work independently, structured, and responsibly in a security-critical environment, ensuring that solutions are operated sustainably, documented comprehensibly, and regularly reviewed for suitability.

Project No.:

1084369

Project Title:

1084369 PKI Architect

Job Type:

freelance

• You will analyze BSI guidelines as well as requirements for key generation, key storage, HSMs, TPMs, cryptography, and system hardening.
• You will record change requests, clarify open points, and assess their impact on existing tender and design documents.
• You will create, update, and consolidate HLD and LLD documents for complex PKI environments.
• You will determine the current state, define the target state, and accompany the technical implementation, including subsequent evaluation.
• You will support the implementation, integration, testing, acceptance, and sustainable documentation of PKI and CA solutions.
• You will consider requirements for Certificate Authorities, certificate lifecycles, HSM integration, and highly available database components.
• You will coordinate technical concepts with internal and external contacts and communicate complex issues appropriately to the target audience.

Requirements

For this demanding position, you bring extensive professional experience in the security environment and particularly in the conception, implementation, and operation of complex PKI infrastructures. You have a deep technical understanding of the relevant security mechanisms and can evaluate requirements both architecturally and operationally. Practical experience with Certificate Authorities, Hardware Security Modules, and the processes surrounding the issuance, renewal, validation, and revocation of digital certificates is particularly important.

Furthermore, you should be able to precisely document technical contexts and independently prepare well-founded decisions. The position is aimed at applicants with approximately three to five years of experience in comparable areas of responsibility; however, due to the technical depth, demonstrable project successes and practical expertise are particularly crucial. You work self-organized, communicate confidently with different target groups, and are fluent in German and English.

Additional Information:

SOLCOM is one of the leading technology service providers in the areas of software development, IT, and engineering. For over 20 years, we have been working as partners with globally active top companies in all industries and are deployed worldwide wherever innovation is decisive.

• You have several years of professional experience in the security environment and specifically in the conception of complex PKI environments.
• You have very good knowledge in the administration and operation of PKI infrastructures.
• You possess very deep practical experience with MySQL, MariaDB, and Galera, especially in their conception and operation.
• You have sound knowledge of cryptography, X.509 certificates, Certificate Authorities, and Hardware Security Modules (HSMs).
• You are familiar with certificate enrollment protocols such as SCEP and EST, as well as certificate validation services such as OCSP and CRL.
• You have experience in implementing CA solutions, including HSM integration, and in renewing CA certificates during ongoing operations.
• You can create and technically evaluate Certificate Policies and Certificate Practice Statements.
• You ideally have knowledge of the technical BSI guidelines TR-02102 and TR-03145.
• You ideally have experience with MTG or MTG Cara and with Utimaco hardware security modules.
• You communicate very well, work independently and with personal responsibility, and act confidently even in demanding situations.
• You are fluent in German and English, both written and spoken.

Project details

Saarlouis and Remote

10/19/2026

06/30/2027

• Start: flexible
• Duration: 8 Monate
• Location: DE
• Languages: German