Public Key Infrastructure Engineer

Applies advanced PKI subject matter knowledge to solve complex business issues and is regarded as a subject matter expert. Frequently contributes to the development of new ideas and methods. Works on complex problems where analysis of situations or data requires an in-depth evaluation of multiple factors. Provides expertise to functional project teams and will participate in cross-functional initiatives across HP. Frequently represents Cyber IAM organization to internal customers and HP suppliers. Exercises significant independent judgment within broadly defined policies and practices to determine the best method for accomplishing work and achieving objectives.

Job Description 

• Manage the PKI Certificate Authority software using PrimeKey - EJBCA 
• Certificate Enrollment Web Service & Policy Web Service 
• Track and provide management for ongoing Information Security initiatives 
• Work directly with customers to understand requirements and implement the correct level of security as needed 
• Analyze security data and produce regular reports containing system security status 
• Assist with system security risk assessments/penetration tests to identify weaknesses, scan for vulnerabilities, recommend and prioritize remediation actions. 
• Establish security best practices/ upgrades and is responsible for the overall health of PKI Infrastructure 
• Work with the infrastructure team to implement the right security policies with the servers, laptops, desktops, storage appliances, virtualization platforms, and network devices 
• Stay on top of industry trends and new technologies to help guide direction and service improvements 

Education: 

• Bachelor’s degree or equivalent experience will be considered.
• 8+ years of relevant work experience 

Required skills: 

• Must understand requirements and recommendations from Governance Risk and Compliance 
• Solid experience in enterprise information security 
• Certificate Authority Administration experience 
• Proficient or generally knowledgeable about PKI, PKI services, and PKI concepts 
• Experience with PrimeKey EJBCA and/or Digicert 
• Proficient with Cloud technologies 
• Experience in one or more of the following: Digicert TLM, Keyfactor Command, Microsoft Intune (SCEP), IIS, JKS and ACME 
• Policy experience in the IAM space and Digital Forensics..
• Strong scripting experience and ability to work with API’s a plus 
• Experience with ServiceNow for ticketing and change request workflows