PKI

Public key infrastructure (PKI)

Job Summary-

The primary purpose of this position is to establish the Public key infrastructure (PKI) service built and

provide operational support.  This includes operations, maintenance and troubleshooting all

components of the PKI infrastructure and its dependencies. It will also require the creation of support

operational guidelines, policies, and procedures for incident, problem and change management in

adherence with Allianz Technology CPI process.

Major Responsibilities

• Design, Implement and Oversee the PKI Infrastructure.

• Develop testing procedures, run tests and approvals, ensure quality, and integrate the system into the

future environment.

• Setting up technical solutions regarding certificate services.

• Respond to customer queries and issues.

• Software development support related to Public Key Infrastructure (Dogtag CA), Identity Provider

(SAML, OAUTH).

• Develop Infrastructure solutions for PKI Service (VMWare, ESXI, AWS, KVM).

• Regular service monitoring and improvement

• Provide hands on engineering support required to build and maintain internal and external PKI

systems.

• Maintain documentation, assist customers through FAQ entries and similar.

• Create, maintain, and align the companys security policies and standards with industry best practices.

• Represent the company on project teams and ensure adherence to existing security policies and

standards and prepare for anticipated needs.

• Development of technical security strategies related to PKI infrastructure.

• Development of technical security architectures related to PKI infrastructure.

• Development of technical security standards related to PKI infrastructure.

• Ideate and communicate with stake holders on the future enhancement of PKI Infra.

• End to end responsibility in the terms of stability and availability of PKI Infra.

Educational & Professional Qualifications

University degree in Engineering or related areas.

Experience

5 to 8 years of PKI, VMWare, OS administration experience. Good to have knowledge on programming

languages like Java, GO, C# etc. Good to have database administration experience along with networking and

AWS knowledge. Good to have knowledge on Single Sign On concepts based on SAML and Oauth protocol.

Technical Skills Requirements

• Profound knowledge on PKI, 389 LDAP and OS administration.

• Profound knowledge on PKI concepts like CA, RA, OCSP, SCEP, HSM etc.

• Profound knowledge on VMware and its concepts.

• Profound knowledge on Security standards.

• Good technical understanding with programming languages such as: C, C++, Python, Ruby,

.NET/PowerShell, Java/JavaScript or other related languages will be an added advantage.

• Good understanding of Single Sign On technologies such as SAML and OAUTH.

• Experience in cryptographic library like OpenSSL.

• Experience in webserver technologies like Tomcat, Apache etc.

• Good experience with Database administration, AWS and networking concepts.

• Good understanding on Active Directory infrastructure is an advantage.

• Competence to manage tasks in demanding and unfamiliar situations with problem solving skills based

on practice.

• Excellent written, verbal and presentation skills.

• Superior problem solving and troubleshooting skills.

• Good organizational skills.

• Proficient in working with high availability environment along with alignment to Agile methods.

Functional/Domain Knowledge

Good-to-have:

• Experience with Monitoring tools like Nagios, Grafana etc.

• Experience with service now ticketing tool.

• Good knowledge to troubleshoot issues on windows client machines.

• Understanding on HAproxy concepts.

• Industry relevant certification.