The Public Key Infrastructure (PKI) Specialist is responsible for driving the function towards successful technical delivery, utilising various programmes and operational support to increase capability and reduce risk. Managing technical debt and technology trade-offs, communicating those to the Service Owner ensuring implementation quality and that correct procedures are in place to assure code and feature quality.
Working closely with other interdependent Engineering Managers to produce required design specifications and ensure operational solutions work together and fulfil business needs.
Working with organizational resources outside the team to remove impediments and protect them from organisational bureaucracy.
As a Public Key Infrastructure (PKI) Specialist, you will report directly to the Senior Manager of Cryptography & Directory Services with the following tasks:
- Continuous service improvement: PKI is heavily used within Maersk, and you will strive to improve its performance and health daily.
- Performing daily service checks and fulfilling request tickets for DNS & PKI.
- Responding to Incidents and Major Incidents in a timely manner to drive resolution
- Driving automation in certificate and key lifecycle management across Maersk
- The ability to extract data, generate reports which highlight where service improvements are required, and create opportunities for development and risk reduction.
- Develop or ensure documentation / code is at high standard and specification in accordance with current framework, working with the wider team and vendors to deliver.
- Build strong collaborative relationships with architects, designers, engineers, external agencies, vendor staff and partners.
- Build strong collaborative external relationships with industry experts.
- Develop scope definition, technical viability scoping and best practice solution design to meet the requirements
- Provide guidance to the Solution Architect in the development of solutions.
- Highlight all risks and issues that affect the development or deliveries
- Form strong and trusted relationship with the Product Owner; ensuring that the Product Owner is fully aware of the technical capabilities and shortcomings of the product allowing for sensible technical investment and debt repayment decisions
- Work across teams to define efficient solutions and implementation strategies to create highly cohesive implementation across products
- Share best technical practice across the team and develop others in their technical learning.
- Demonstrate interest in improving the company s technical awareness, depth and use of technology across the business.
- Participate in the evolution of company level best practices, standards, and policies related to software development.
We are looking for:
Experience & Technical Skills:
- A minimum of 5+ years working with Public Key Infrastructure (PKI), Access Management and Identity in general
- Experience with Venafi and/or similar Certificate Lifecycle Management suite
- Experience in Key Management System (Entrust Key Control)
- Knowledge of Microsoft s Active Directory Certificate Services, implementation and its security.
- Experience Managing & configuring Hardware Security Module (HSM) technology (Thales/Entrust)
- Experience with managing Public Domain Names & External DNS Records.
- Good experience in system integration using modern technologies e.g. REST API, MS Graph API and Log Analytics API
- Automation is key! You will have experience working with PKI to optimise and automate
- Highly skilled in writing clean, reusable and efficient script that is easy to read
- Deep knowledge and understanding of technology; a person who stays relevant with the latest technology advancements and trends
- Knowledge of Identity Access management solutions and protocols.
- Knowledgeable in cloud-based document management products.
Preferred skills:
Knowledge of DevOps or something similar
Knowledge of ITIL v3
Knowledge of auditing
Ways of working:
- You are passionate about PKI, authentication, authorisation and security related to identity. You keep up with new developments within the identity world.
- Understand the principles of least privileges. We never give out more permissions than required!
- Understand that if something looks or feels wrong, then it probably is wrong!
- Willing to take ownership of a problem, even if no one is else is willing to do so.
- Highly motivated and work well under pressure
- Willing to keep up and learn new technology and understand how they will be beneficial to Maersk if implemented.
- Be concise and to the point.
- Have excellent communication skills. You will need to explain complex solutions to other engineers, end users, developers and management and can change the level of technical language used dependent on the target audience.
- You can articulate the risk of implementing or nor implementing a solution.
- Have excellent documentation skills. This could be when you are creating documentation for other engineers within Confluence, creating LLD s / HLD s, creating end user documentation or producing a read me file within source control.
- Structured, highly analytical mindset and excellent problem-solving skills. You will need to understand complex identity and attribute flows and be able to come to root cause very quickly.
- Collaborative, with strong facilitation and people skills / personal impact
- Willing to work on new technologies and languages outside of their core skillset
- Innovative, with the ability to think outside the box
- Fact-based and result oriented
- An individual who respects the opinion of others; yet can drive a decision through the team
- An individual who understands and respects the agile method
- An individual who wants to contribute to the wider engineering community to define best practices
Leader of people:
- The ability to leads reviews of others designs and software implementations
- The ability to engage the team to achieve goals.
- The ability to inspire fellow technical people
