Security Consultant

Skills
Certificate ManagementDigital AuthenticationHardware SecurityIT Infrastructure DesignIndustry StandardsMultiple Projects SimultaneouslyOpenssl
Role

What the job involves

The main requirements, responsibilities and hiring steps.

Requirements

  • Bachelor's degree in Computer Science, Information Technology
  • 6+ years of experience with public key infrastructure design and implementation.
  • 4+ years of experience administrating and managing Hardware Security Modules.
  • Strong understanding of certificate-based authentication and encryption protocols, such as SSL/TLS.
  • Knowledge of industry standards and best practices.
  • Hands-on experience with digital certificate management, including issuance, revocation, and renewal.
  • Strong technical skills in network security, firewall configurations, and VPN technologies.
  • Knowledge of security and risk assessment methodologies, vulnerability scanning, and penetration testing.
  • Hands-on experience with Unix based OS such as RedHat Linux, Ubuntu.
  • Knowledge and experience with EJBCA and Sign Servers or other PKI applications such as Active Directory Certificate Services, and OpenSSL CA.
  • Ability to work in a fast-paced, high-pressure environment and handle multiple projects simultaneously.
  • Strong communication skills and ability to effectively interact with clients, stakeholders, and internal teams.
  • Certifications in security, such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), or Certified Ethical Hacker (CEH), are highly desirable.

Nice to have

  • Experience managing EJBCA applications.
  • Experience specifically managing Thales HSMs.
  • Experience writing Python, Shell based scripts.
  • Experience managing MySQL Databases.
  • Experience with different WebServices protocols such as RESTAPI.

Day to day

  • As a PKI (Public Key Infrastructure) Engineer, you will be responsible for designing, implementing, and maintaining a secure public key infrastructure.
  • Maintaining a secure public key infrastructure to support certificate-based authentication and encryption.
  • Implement and maintain Code Signing infrastructure. Managing and maintaining digital certificates, including certificate authorities, root certificates, and intermediate certificates.
  • Ensuring compliance with industry standards and best practices such as NIST guidelines.
  • Managing and monitoring the issuance, revocation, and renewal of certificates.
  • Implementing and maintaining secure certificate-based authentication and encryption protocols, such as SSL/TLS.
  • Collaborating with other larger product engineering teams to ensure that the PKI infrastructure is integrated with other systems and processes.