PKI Architect

Project overview

As a PKI Architect, you will take on a central role in the analysis, conception, further development, and implementation of complex Public Key Infrastructures. You will ensure that security-critical requirements from technical guidelines, tender documents, and existing system landscapes are translated into robust architectural and implementation concepts. You will examine the current state of the PKI environment, identify optimization and change needs, and define a technically and organizationally viable target state together with the relevant stakeholders.

From the initial requirements gathering, through the evaluation and adaptation of high-level and low-level designs, to implementation, testing, and documentation, you will accompany the entire change lifecycle. You will work independently, structured, and responsibly in a security-critical environment, ensuring that solutions are operated sustainably, documented comprehensibly, and regularly reviewed for suitability.

You will analyze BSI guidelines as well as requirements for key generation, key storage, HSMs, TPMs, cryptography, and system hardening.

You will record change requests, clarify open points, and assess their impact on existing tender and design documents.

You will create, update, and consolidate HLD and LLD documents for complex PKI environments.

You will determine the current state, define the target state, and accompany the technical implementation, including subsequent evaluation.

You will support the implementation, integration, testing, acceptance, and sustainable documentation of PKI and CA solutions.

You will consider requirements for Certificate Authorities, certificate lifecycles, HSM integration, and highly available database components.

You will coordinate technical concepts with internal and external contacts and communicate complex issues appropriately for the audience.

Requirements

For this demanding position, you bring sound professional experience in the security environment and particularly in the conception, implementation, and operation of complex PKI infrastructures. You have a deep technical understanding of the relevant security mechanisms and can evaluate requirements both architecturally and operationally. Your practical experience with Certificate Authorities, Hardware Security Modules, and the processes surrounding the issuance, renewal, validation, and revocation of digital certificates is particularly important.

Furthermore, you should be able to precisely document technical contexts and independently prepare sound decisions. The position is aimed at applicants with approximately three to five years of experience in comparable areas of responsibility; however, due to the technical depth, demonstrable project successes and practical expertise are particularly crucial. You work self-organized, communicate confidently with different target groups, and are fluent in German and English.

You have several years of professional experience in the security environment and specifically in the conception of complex PKI environments.

You have very good knowledge in the administration and operation of PKI infrastructures.

You possess very deep practical experience with MySQL, MariaDB, and Galera, especially in their conception and operation.

You have sound knowledge of cryptography, X.509 certificates, Certificate Authorities, and Hardware Security Modules (HSMs).

You are familiar with certificate enrollment protocols such as SCEP and EST, as well as certificate validation services such as OCSP and CRL.

You have experience in implementing CA solutions, including HSM integration, and in renewing CA certificates during ongoing operations.

You can create and technically evaluate Certificate Policies and Certificate Practice Statements.

You ideally have knowledge of the technical BSI guidelines TR-02102 and TR-03145.

You ideally have experience with MTG or MTG Cara and with Utimaco Hardware Security Modules.

You communicate very well, work independently and with personal responsibility, and act confidently even in demanding situations.

You are fluent in German and English, both written and spoken.

Additional Information:

Project No.: 1084369

Position Type: Location: Start: 10/19/2026 Duration: 06/30/2027

Project details

• Start: 19.10.2026
• Duration: 30.06.2027
• Location: DE
• Languages: German