Beschreibung
We are currently looking for PKI Expert (m/f/d) for our energy clientStart: 18.04.22
End:
Volume: 16hrs/ week
Location: Remote
Language: German and English
Background: The project has the aim to remove the PKI token (used for singing, authentication and encryption) from the client. In order to achieve this the project needs to provide clear guidance to stakeholders and proper communication to end-users. As part of the replacement we need to manage technical dependencies, advertise existing replacing technologies and expand the capabilities for Adobe Sign. The project will support stakeholders to migrate their dependencies and solve them. Alongside with that we will develop and implement a long term archiving solution in order to stay compliant with regulatory requirements. To fulfill some remaining requirements we will also implement a small scale new PKI modern solution. Alongside the project implementation we will also continue to deliver smaller improvements to the PKI landscape until we can switch it off. The initiative is a multiyear project spanning from 2021 to 2023.
Tasks (performed independently):
* Creation of S/MIME security concept and architecture to
support the new PKI SMIME solution
* Planing, Installing and configuring Certificate management
PKI Components
* Creation and realization of automation for TLS/SSL
(Internal/External) and Azure Key Vault with ACME
with pre-selected by the client Certificate Authority DigiCert
* Analyze existing PKI infrastructure and consult for
improvements based on given standards.
* Establishing a new governance model for Azure Key Vault in
the clients environment, collection of use
cases and creation of proper documentation for it. Approved
then internally by the SO and based on the new model a new
service established
* Maintenance of exiting PKI SNOW articles and creation of
new documentation related to changes in the
PKI Service.
The client provides all necessary information, access to the systems and requirements in advance.
Skills:
* Senior Expert in PKI Area
* Very good understanding of the functions of PKI Certificates
(x.509 Standard)
* Solid Experience with Microsoft Azure Key Vault and other
MS Products (AD, AAD)
* Good understanding of the functionalities of CA as well as
PKI Client components (Windows 10)
* Good understanding of the functionality for Authentication in
applications, e.g Webserver IIS or Apache.
* Good understanding of Email Signature and Encryption with
Outlook 2019 und O365
* Good understanding of Digital Signature with Adobe und
Office Documentation
* Deep dive into Cloud-Technologien (MS Azure) und
Hardware-Security modules
* Modern thinking in terms of new IT Security concepts und
Ideas creation/realization
* Interest in innovations (Cloud-Technologies)
* Possibility for business travels
* Fluent German and Business English
* Certifications in Cyber Security area (z.B. CISSP) are
considered as advantage
* Experience as consultant in IT-Security / PKI
* Solid knowledge in Cryptography, PKI, X.509
Michael Bailey International is acting as an Employment Business in relation to this vacancy.