Senior Solutions Architect (Infrastructure) 70 - 100%

Beschreibung

For a project in Basel (pharmaceutical industry) we are looking for a motivated

Senior Solutions Architect (Infrastructure) %

Tasks:
We are initiating a PKI (public key infrastructure) redesign and upgrade project to build a new, enterprise-wide SHA-2 capable PKI infrastructure, plus to lifecycle the current SHA-1 capable infrastructure in parallel. Both PKI solutions are planned to be implemented in a virtualized environment (the current SHA-1 infrastructure is currently running on physical servers).

In order to support the project with expert knowledge and to extend the internal workforce required to handle the anticipated activities, we are looking for an experienced PKI expert / solution architect with extensive experience as a practitioner (technical engineer) for the duration of the Project.

?Be part of the project core team, collaborate with Engineering and Operations team members
?Provide PKI expert knowledge for design, build, test and migration
?Execute all necessary activities and installations (test, production) on time in collaboration with the project team, following Roche's processes (design, documentation, implementation in lab and production, etc.)
?Define and document the solution architecture and all required technical project documentation
?Define Testing approach incl. documentation; collaborate with test execution team as required


Qualification:
?7+ years of experience of designing and implementing large global enterprise-wide PKI infrastructures as a technical engineer (experienced practitioner at various large enterprises)
?Experience with building virtualized PKI infrastructure solutions
?Experience with SHA1 to SHA2 migrations
?Experience with installation and configuration of Enterprise/Stand-alone CA, Root CA/Intermediate CA/Subordinate CA, incl. usage of HSM
?Strong skills to design automated certificate enrollment, automated certificate approval, or Manual Approval process/procedure
?Expert knowledge on design and architecture of Microsoft PKI
?Expertise to design and implement policy for enrolling, approving certificates for Non-AD devices (Network devices, load-balancers, handhelds, etc.,)
?Excellent English language skills (conversation, presentation, documentation)
?Firm on PKI related knowledge like
?Security protocols, including SSL/TLS, OCSP
?Cryptography: SHA1, SHA2, RSA, DSA, ECC, Symmetric Key
?PKI standards including X509, PKCS family, PCKS#11, CRL
?Experience with hardware security module (like Luna CA4, Luna SA, AEP Keyper, nCipher)
?Worked with different cryptographic options for CA
?Familiar with Crypto Libraries like BSAFE, OpenSSL
?Familiar with ASN.1, DER/BER encoding, Comfortable working in Linux, Windows


General information:
?Preferred start date: 03.04.2017 (as soon as possible)
?End date: 29.06.2018 (an extension is currently not planned)
?Location: Basel
?Preferred Workload: 70% (There is a flexible range between 50% and 100%. This can be discussed in the interviews.)
?Travelling: Not required
?Remote/ Home Office (up to 20%) is an option, prior approval required. (This can be also discussed in the interviews.)


We offer:
?6 weeks of holiday
?A great working enviroment and an open culture
?Good development opportunities


Interested? We are looking forward to get in touch with you.

Selma Hadzic