Senior Developer and Architect Cryptography Services

ASML's IT department is working Agile according SAFe 5.0 (Scaled Agile Framework 5.0): teams are organized in Agile Release Trains (ARTs). The Identity & Access Management (IAM) ART is responsible for providing seamless, continuous, state-of-the-art capabilities and services to the whole of ASML (globally). The IAM ART consists of teams in the domains of Identity Governance & Administration (IGA), Access Management (AM), Directory Services, Privileged Access Management (PAM) and Cryptography Services (CS). All teams within the ART adopt a DevOps way of working - you build it, you run it, you maintain it, you own it!

Role and responsibilities

As a Cryptographic Solution Architect & Senior Developer you are part of the Agile team that is responsible for the operation and innovation of our Cryptographic solutions. This team owns the functional and technical design, detailed domain architecture and migration strategy for our Cryptography Services within the IAM landscape. Currently, outside of the existing mature services on Public Key Infrastructure (PKI) and hardware backed Key Management Services (KMS), the team is working on the improvement of Certificate Lifecycle Management (CLM) as well as enabling secure usage of cloud workloads. Enabling the business to own and manage their own certificates and keys in a compliant and fully automated way and offering crypto agility by leveraging new Certificate Authorities and Post-Quantum Cryptography.

Being the domain architect and senior developer, you are expected to have a broad understanding of the IAM domain in general and of cryptographic services in particular. In your role, you will provide support and guidance to the team on (international) standards, best practices and sustainable processes and integrations. Therefore this role requires strong consultancy and communication skills. In addition, topics like Agile, DevOps, CI/CD/CT-based automation and standardization are known to you and are part of your skills and competences.

You work closely together with your on- and offsite team members (PKI & cryptographic specialists), the Product Owner and Scrum Master, the IAM System Architect and peer architects, other teams in the IAM ART and stakeholders (such as clients, security & partners) from the business.

Main responsibilities

• Co-owning the functional and technical design, development, configuration, and operation of our Cryptography landscape;
• Support the System Architect by refining and implementing enablers for the architectural runway;
• Together with the team creating designs for features and stories in line with the IAM architectural principles, standard IAM processes and the company strategy;
• Contribute to refinement of features into stories and provide high level effort estimations for the implementation of the designed solutions;
• Coordinate, develop, validate and implement functional and non-functional requirements related to our Cryptography solution;
• Developing value by delivering expected output on time;
• Be proactive towards driving standardization and automation;
• Support the Product Owner in the rollout of secure cryptographic, yet functional, processes;
• Support DevOps practices within the team and the use of CI/CD/CT tooling.

Do you have experience in Visio?, Do you have a Master's degree?, * Master's or bachelor's degree in a technical area such as computer science. Security and Cryptography knowledge strong precondition;

• Experience with ArchiMate is a big plus, preferably certified
• Valid industry certifications such as TOGAF, CISSP, CompTIA+, CISA or CISM are a plus;
• Agile + SAFe certifications are a plus (scrum.org and/or SAFe®certifications).
• Minimal 10 years of professional experience with in-and external CA (Certificate Authorities), e.g. experience with different PKI (Public Key Infrastructure) components like MS ADCS/EJBCA, CRL, OCSP, NDES, Intune, ACME and providers such as Entrust, Digicert, Sectigo;
• Min 3 to 5 years of professional experience with a CLM (Certificate Lifecycle Management) tool like KeyFactor, AppViewX or Venafi,
• Min 3 to 5 years of professional experience with HSMs, AWS KMS, Azure Managed HSM & Key Vault etcetera;
• Experience with Post-Quantum Cryptography is a pre;
• Experience with CI/CD/CT automation is a strong pre;
• Experience with the DevOps way of working and working in an Agile team. Experience with SAFe is a pre;
• Capable of identifying improvements in processes and technology;
• Sound understanding of security technologies, best practices, and security policy frameworks;
• Good experience with visualizing tools such as Microsoft PowerPoint, Visio/Miro, Mermaid/Graphviz to create a clear storyline and logical (flow-)charts., * Enthusiastic and passionate about IAM, cryptography and certificate technology and serving business's needs;
• Excellent verbal and written English communication and presentation skills. Command of the Dutch language is a plus;
• Highly-motivated, with a strong work ethic and a can-do mentality. Able to work effectively with a team and have leadership skills;
• Conceptual thinker who translates high-level concepts into practical solutions, with a broad perspective and innovative approach;
• Design System thinking: Able to design and implement fitting/integrating solutions in a complex environment;
• Act as a role model, offer support and coaching/mentoring to other members of the team.

ASML is a high-tech company, headquartered in the Netherlands. We manufacture the complex lithography machines that chipmakers use to produce integrated circuits, or computer chips. Over 30 years, we have grown from a small startup into a multinational company with over 60 locations in 16 countries across Europe, Asia and the US.