GCS PKI Engineer, Vice President

at  State Street Corporation

GCS PKI Engineer, Vice President
We are excited to see that you are reviewing career opportunities available at State Street. the tips below when applying. If this opportunity is not right for you - perhaps you may want to refer a friend?

JOB DESCRIPTION

The PKI technical engineer candidate will work to evolve and consolidate PKI infrastructure throughout the enterprise. The PKI Engineer candidate will drive the development of PKI solutions to meet security and business requirements. The PKI Engineer candidate must possess a strong understanding of the concepts of cryptography such as Symmetric/asymmetric cryptography, Secure hash functions, Digital signatures, SSL/TLS
The candidate must possess strong understanding of security best practices.

SKILLS/KNOWLEDGE DESIRED:

• Certificate Authority Administration
• Certificate Enrollment Web Service & Policy Web Service
• Active Directory Certificate Services (ADCS) monitoring.
• PKI as service
• Data-in-motion Encryption
• Data-at-rest Encryption
• Expertise in Public Key Infrastructure (PKI) machine identity technologies such as SSH , SSL/TLS.
• Familiarity with Disaster Recovery process and Business Continuity procedures.
• Experience in managing Key Management Systems (KMS).
• Ability to design and implement solutions that optimize systems and processes
• Proficiency with a scripting language such as Java, Python or Powershell
• Experience in database configuration and SQL
• Experience with workflow and API development
• Ability to organize and rationalize complex data sets

EXPERIENCE DESIRED

• 9+ years of experience working with PKI architecture
• 9+ years of System Administration of Windows, Unix/ Linux
• 9+ years of experience in infrastructure (security/systems/network) engineering and/or development
• 9+ years in technology and/or project management leadership positions
• 9+ experience developing executive-level reporting and communications
• 9+ experience establishing and defining the scope of new teams or functions
• 9+ experience working in large complex environments (financial services a plus)

• Support and enhance company wide PKI services using current Certification Authorities (CAs) and Registration Authorities
• Design, implement Orchestration and Automation of Enterprise certificate management
• Design, implement Enterprise Code Signing Services
• Provide consulting and guidance to application teams around cryptographic technologies
• Design secure vaulting solutions using Hardware Security Modules (HSM) and Key Management systems (KMS)
• Support Simple Certificate Enrollment Protocol (SCEP) servers
• Design, test, implement changes in the PKI Infrastructure
• Interface with vendors that provide security/encryption services to the company
• Lead the definition and implementation of POCs around PKI and other certificate related technologies
• Developing and maintaining system orchestration to automate day to day processes
• Developing and maintaining ad-hoc and automated data reporting as needed using vendor tooling or custom automation as appropriate
• Creating and maintaining documentation for technical and administrative functions
• Evolving the framework for system monitoring and develop tooling to automate notifications and generate reporting/metrics
• Providing guidance for scoping complex, cross-organizational projects as needed
• Develop automation approaches to solve PKI lifecycle challenges
• Analyze legacy PKI solutions for security gaps and develop new approaches/capability to mitigate
• Develop standards and approaches to enable seamless integration across technical stacks
• Partner with architecture teams to understand security and business implications of PKI strategy
• Act as a technical owner on initiatives involving PKI technologies
• Champion PKI capability and integration across core security and IT
• Develop and deploy solutions to ensure that Digital Credential Services are performing according to specifications, meet defined procedures, and comply with applicable information security policies and requirements.
• Integrate applications and third-party products into internal services