PKI Engineer
Role details
Job location
Tech stack
Job description
You will act as a cryptographic engineering developer, focused on cryptographic protocols, including but not limited to, post quantum cryptography, PKI solutions, and strategic vendor interaction. The engineer will work on next generation crypto ecosystem.
The job will also involve working with advanced mathematical algorithms in the PKI.
You will participant in certificate management development focusing on certificate automation projects in Citi, including certificate automation for microservices, desktops, servers, Windows, Unix hosts, firewalls, appliances., * The candidate's primary responsibility will be to research cryptographic protocols, develop crypto solutions at the enterprise level, which will include working on PKI architectures with main focus on certificate management automation.
- The candidate must have experience with PKI, and understanding of basic cryptography This person must understand the principles related to PKI, private keys, encryption methods, CRL, and advanced key usages.
- They must be familiar with information security concepts and products.
- They must have strong development background.
- A sound knowledge of encryption algorithms and peripheral technologies is required.
- Work with all disciplines, engineers, and operational product owners to integrate PKI and certificate management related technologies with Citi platforms to protect and manage the cryptography of mission critical systems.
- Perform product evaluation, testing and certification of PKI and Crypto technologies. Ensure that all security products meet or exceed Citi internal and regulatory requirements.
- Provide occasional 4th level support for the product toolset.
- Produce documentation of processes and procedures for the usage of the product.
- Follow the Technology Development Life Cycle in the development of all security tools.
Requirements
- Senior level experience in cryptography
- Experience with commercial Ca products and/or certificate management systems is a plus.
- Working with Trust Providers is a plus.
- Understanding of Microsoft Windows operating systems
- Understanding of Linux
- Understanding of cryptographic protocols
- Programming Experience in JAVA or C
- Programming in Python
- Knowledge of Crypto Libraries (Bouncy Castle)
- Sound security engineering principles as background to understanding the inner workings of the systems and controls that form an enterprise security ecosystem
- Symmetric Key Encryption
- Asymmetric Encryption, * Bachelor's degree/University degree or equivalent
Benefits & conditions
By joining Citi, you will not only be part of a business casual workplace with a hybrid working model (up to 2 days working at home per week), but also receive a competitive base salary (which is annually reviewed), and enjoy a whole host of additional benefits such as:
- 27 days annual leave (plus bank holidays)
- A discretional annual performance related bonus
- Private Medical Care & Life Insurance
- Employee Assistance Program
- Pension Plan
- Paid Parental Leave
- Special discounts for employees, family, and friends
- Access to an array of learning and development resources