GCS PKI Engineer, AVP

at  State Street Corporation

JOB DESCRIPTION

This is a technical position to evolve and consolidate PKI infrastructure throughout the enterprise.
The PKI Engineer candidate will assist in the development of PKI solutions and day to day operations to meet security and business requirements. The PKI engineer candidate must possess an understanding of the concepts of cryptography such as Symmetric/asymmetric cryptography, Secure hash functions, Digital signatures and SSL/TLS. The candidate should possess strong understanding of security best practices.

SKILLS/KNOWLEDGE DESIRED:

• Certificate Authority Administration
• Certificate Enrollment Web Service & Policy Web Service
• Active Directory Certificate Services (ADCS) monitoring.
• Data-in-motion Encryption
• Data-at-rest Encryption
• Strong knowledge in Public Key Infrastructure (PKI) machine identity technologies such as SSH , SSL, TLS.
• Familiarity with Disaster Recovery process and Business Continuity procedures.
• Proficiency with a scripting language such as Java, Python or Powershell
• Experienced in database configuration and SQL
• Experience with workflow and API development

EXPERIENCE DESIRED

• 3-5 years of experience working with PKI architecture
• 3-5 years of System Administration of Windows, Unix/ Linux
• 3-5 years of experience in infrastructure (security/systems/network) engineering and/or development
• 3-5 years in technology and/or project management leadership positions
• Experience developing executive-level reporting and communications
• Experience establishing and defining the scope of new teams or functions
• Experience working in large complex environments (financial services a plus)

• Support and enhance company wide PKI services using current Certification Authorities (CAs) and Registration Authorities
• Monitor for and Ensure timely renewal of expiring certificates
• Provide consulting and guidance to application teams around cryptographic technologies
• Test, implement changes in the PKI Infrastructure
• Interface with vendors that provide security/encryption services to the company
• Assist in the development and maintenance of system orchestration to automate day to day processes
• Assist in the development and maintenance of ad-hoc and automated data reporting as needed using vendor tooling or custom automation as appropriate
• Creating and maintaining documentation for technical and administrative functions
• Assist in the development and maintenance of automation approaches to solve PKI lifecycle challenges
• Assist in the Integration of applications, infrastructure and third-party products into internal PKI services