11.03.2026 aktualisiert


100 % verfügbar
IT-Security, HSMs and PKI Consultant | Cryptography | ISO 27001 | Software Engineering | Smartcards
Graz, Österreich
Weltweit
Diplom-Ingenieur ElektrotechnikÜber mich
Over 20 years of professional, hands-on, experience in hardware security modules (HSM), information security, software engineering, public key infrastructure (PKI), cryptography, smartcards and key/certificate management. Certified ISO 27001 Lead Auditor and Certified Software Architect.
Skills
Asp.NetC (Programmiersprache)Java.Net FrameworkArchitekturAtlassian ConfluenceAtlassian JiraMicrosoft AzureC#C++Komprimiertes Erdgas (CNG)InformationssicherheitKryptographieLinuxHardware-Sicherheitsmodul
Hardware Security Modules (HSMs), Utimaco, Thales
Key/Certificate Management, KMIP
Cryptography, Post Quantum Cryptography (PQC)
Public Key Infrastructure (PKI), X.509, OpenXPKI, EJBCA
C#, ASP.NET, Python, Java, C, C++
Software Architecture (SCPA-F)
Information Security, ISO 27001, Risk management
Identity and Access Management (IAM)
OpenSSL, PKCS#11, CSP/CNG, BouncyCastle, PGP, GnuPG
Smart cards (JavaCard, Mifare, GlobalPlatform, JCOP)
MS SQL
Windows, Linux
Project and service management
Confluence, Jira, Git
MS Azure
Logging and Monitoring (ELK, Kibana, Splunk, Nagios, PRTG)
Erfahrung
Berufserfahrungmehr als 10 Jahre
Freelancer seit2022
Sprachen
DeutschverhandlungssicherEnglischverhandlungssicherKroatischMuttersprache
Projekthistorie
* Regular maintenance of Utimaco CryptoServer LAN HSM (Firmware, Tools and OS upgrade)
* Configuration of NTP and SNMP on CryptoServer
* IT Consulting in the area of Utimaco HSM and CNG/CSP crypto provider (Microsoft CA/PKI environment)
- C# Software development (network communication protocol, Gematik VAU-protocol, TLS)
- HSM Integration – migration from BouncyCastle to PKCS#11 (HSM)
- Post Quantum Cryptography (ML-KEM, FIPS203, Kyber, AEAD)
- Administration, operation and maintenance of HSMs (2nd/3rd level support)
- Providing technical support to Software development team on HSM integration topics
- Preparation and implementation of Security awareness and operational trainings
- Consulting and support in preparation of monitoring concepts in a Private Cloud Platform, to assure high
- availability of cryptography-related infrastructure and applications (Elasticsearch, Kibana, Utimaco)