Beschreibung
We are looking for a Senior Solutions Architect PKI Infrastructure as follows:
General information:
Preferred start date: 03.04.2017 (as soon as possible)
End date: 29.06.2018
Location: Basel
Preferred Workload: 70% (There is a flexible range between 50% and 100%. This can be discussed in the interviews.)
Travelling: Not required
An extension is currently not planned.
Remote/Home Office (up to 20%) is an option, prior approval required. (This can be also discussed in the interviews.)
Background:
Our customer is initiating a PKI redesign and upgrade project to build a new, enterprise-wide SHA-2 capable PKI infrastructure, plus to life cycle the current SHA-1 capable infrastructure in parallel. Both PKI solutions are planned to be implemented in a virtualized environment (the current SHA-1 infrastructure is currently running on physical Servers).
In order to support the project with expert knowledge and to extend the internal workforce required to handle the anticipated activities, we are looking for an experienced PKI expert/solution architect with extensive experience as a practitioner (technical engineer) for the duration of the project.
Tasks/Responsibilities:
- Be part of the project core team, collaborate with our customer's Engineering and Operations team members
- Provide PKI expert knowledge for design, build, test and migration
- Execute all necessary activities and installations (test, production) on time in collaboration with the project team, following our customer's processes (design, documentation, implementation in lab and production, etc.)
- Define and document the solution architecture and all required technical project documentation
- Define Testing approach incl. documentation; collaborate with test execution team as required
Must Haves:
- 7+ years of experience of designing and implementing large global enterprise-wide PKI infrastructures as a technical engineer (experienced practitioner at various large enterprises)
- Experience with building virtualized PKI infrastructure solutions
- Experience with SHA1 to SHA2 migrations
- Experience with installation and configuration of Enterprise/Stand-alone CA, Root CA/Intermediate CA/Subordinate CA, incl. usage of HSM
- Strong skills to design automated certificate enrollment, automated certificate approval, or Manual Approval process/procedure
- Expert knowledge on design and architecture of Microsoft PKI
- Expertise to design and implement policy for enrolling, approving certificates for Non-AD devices (Network devices, load-balancers, handhelds, etc.,)
- Excellent English language skills (conversation, presentation, documentation)
Firm on PKI related knowledge like:
- Security protocols, including SSL/TLS, OCSP
- Cryptography: SHA1, SHA2, RSA, DSA, ECC, Symmetric Key
- PKI standards including X509, PKCS family, PCKS#11, CRL
- Experience with hardware security module (like Luna CA4, Luna SA, AEP Keyper, nCipher)
- Worked with different cryptographic options for CA
- Familiar with Crypto Libraries like BSAFE, OpenSSL
- Familiar with ASN.1, DER/BER encoding, Comfortable working in Linux, Windows
Nice to Haves:
- 10-15 years of experience of designing and implementing large global
- enterprise-wide PKI infrastructures Experience with migration of use
- cases to Managed PKI solutions
- Created Root Key Ceremony
- Fluent in German
Additional information:
The core team (of 7 team members) is looking for a new team member 1) who is an expert in the PKI area, 2) who brings his/her knowledge into the team, and 3) who will also do some Documentation stuff (so not only knowledge transfer). The aim is to split the workload within the team. The Hiring Manager as well as the Technical Leader will coordinate the workflow.
If you meet the requirements and if you are interested please mail your CV and your desired hourly rate as soon as possible, latest by 13.3.2017.
I look forward to hearing from you.