PKI and Encryption Engineer

Role Overview:

You will design, operate, engineer, automate, and manage PKI and Crypto infrastructure, including Windows/Linux servers, COTS appliances, focusing on global certificate and key management, data, and database security.

Key Responsibilities:

• Design, engineer and manage key and certificate management services, including supporting robust, enterprise-grade Public Key Infrastructure (PKI), certificate lifecycle management, infrastructure automation and key management systems
• Experience with technologies like Gemalto KeySecure, Thales CipherTrust Manager, Oracle Key Vault, MS ADCS PKI and Sectigo PKI
• Develop and operationalize certificate management across various technology platforms and cloud providers
• Develop and automate solutions for key management and certificate lifecycle challenges.
• Interface with management, engineers, architects, partners, and vendors
• Collaborate with vendors to align their technology roadmap with Experian needs
• Lead high-level cryptographic security initiatives and ensure timely delivery in a devops culture
• Diagnose, solve and provide root cause analysis for PKI and encryption related issues.
• Work in collaboration with security and infrastructure teams to integrate tools and optimize certificate management processes
• Participate in off-hours, on-call support on a rotational basis
• You will report to Director - Data Protection

Required Qualifications:

• 10+ overall experience
• 5+ years in Information Security Engineering or equivalent
• 4+ years in managing PKIs and relevant infrastructure
• 4+ years in encryption technologies (Gemalto KeySecure, Thales CipherTrust Manager, Oracle Key Vault)
• 2+ years working with Cloud Providers (AWS, Azure) and Infrastructure as code practices (Terraform, cloud formation)
• Strong understanding of cryptographic principles and technologies, including TLS, PGP, PKI, HSM, key management, and data protection methods

Desired Qualifications:

• Excellent communication skills and ability to effectively collaborate with cross-functional teams
• Experience with key management infrastructure upgrades, security patches, version upgrades
• Ability to design/develop automation solutions
• Knowledge of key management, encryption utilities for application code, file encryptions
• AWS hands on experience of designing and managing AWS cloud solutions
• Proven ability to manage complex projects with multiple stakeholders and competing priorities
• Strong analytical, problem-solving and troubleshooting skills along with regular documentation and adaptation to dev ops culture in agile methodology.
• Working within an agile development methodology (Kanban, Scrum, etc)