Job Description:
Essential Duties, Responsibilities:
· Experience with HSM (Hardware Security Module) likes Thales or Cloud HSM
· Assist in the maintenance and support all Enterprise PKI technology, including
o Symantec MPKI.
o Microsoft Certificate Services.
· Knowledge and experience in Security areas such as cryptography, PKI, Code Signing, HSM, SSL / TLS, TPM, Windows security.
· Manage and grow existing public and private Certificate of Authorities.
· Support PKI rollouts to new Accounts/Projects and merge PKI infrastructures to our enterprise systems.
· Administer the PKI certificate lifecycle for various solutions.
· Evaluate upgrades and new products in a lab environment for the enterprise PKI infrastructure.
· Propose and implement improvements to PKI in accordance with standard procedures and change control policies and procedures.
· Participate in projects to deploy new PKI applications and services
· Assist in the development of PKI or authentication solutions using Scripts (such as PERL, JAVA, PowerShell etc.) as per requirement.
· Implement all changes to the PKI infrastructure in accordance with standard procedures and change control policies and procedures.
· Work supporting various application owners and their needs as in pertains to PKI and implementation of certificates.
· Provide documentation and training to IT extended teams (Services Desk, Desktop Services, Desktop Engineering, Directory Services, and Messaging).
· Work with Technical Writers to maintain PKI online resources.
Skills:
· Demonstrated knowledge in systems administration (Required)
· Windows 20xx Server
· Linux
· Microsoft Active Directory (Including Active Directory Certification Services)
· GPOs (Global Policy Objects)
· Domain membership and authentication
· Internet Information Service (IIS)
· DNS
· Server hardening & security
• Familiarity with development environments (anyone is minimum required)
Perl, Java, PowerShell, Python
• Familiarity with x.509 digital certificates (Desired)
o Windows
· Certificate storage (User vs. Machine)
· CSP
o Apple OS X
· Certificate storage (e.g. Keychain)
o Java Keystore
o Command-line tools (e.g. certtool, security, openssl, etc.)
o Certificate Fields
o Certificate Usage
· Client Authentication
· Signing
· Encryption
• S/MIME
• EFS
· Revocation (CRL & OCSP)
· Validity checking
o Microsoft Certificate Services
· Certificate Templates
· Auto enrollment
· Manual enrollment
· User and machine certs
Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.