IT Support

Qualifications Technical and behavior abilities: Have at least 3 - 5 years of hands-on experience in managing internal and external certificates. Have at least 2 years of experience on any of the Certificate Authority – Digicert(preferred), Gandi or Global sign. Preferably have at least 1-2 years in a multi-national company managing more than 1000 certificates. Behavior abilities: Strong English verbal and written communication skills. A team player with the ability to drive projects and initiatives with peers. Enjoy challenges and love applying technology to solve problems. Self-Lead and Exceptional communication skills with diverse audiences - Strong critical thinking and analytical skills Technical environment: Public Key Infrastructure (PKI) Understanding of PKI concepts: asymmetric encryption, digital signatures, certificate chains. Experience with internal and external Certificate Authorities (CAs). Knowledge of X.509 certificate structure. Certificate Lifecycle Management Issuance, renewal, revocation, and expiration tracking. Familiarity with tools like: Digicert Globalsign OpenSSL HashiCorp Vault Venafi, Sectigo, Keyfactor Cryptography Knowledge of encryption algorithms (RSA, ECC, AES). Understanding of hashing (SHA-2, SHA-3) and digital signatures. Operating Systems : Admin-level experience with: Windows Server (especially with Active Directory Certificate Services) Linux/Unix systems for managing certificates and services Networking & Protocols Understanding of SSL/TLS, HTTPS, S/MIME, IPsec, and VPNs. Familiarity with protocols like OCSP, CRL, LDAP, and DNS. Scripting & Automation Knowledge on scripting languages: PowerShell (especially for Windows environments) Bash (for Linux) Python (for automation and integration) Experience automating certificate issuance and renewal. Security Tools & Platforms Experience with: Certificate management platforms SIEM tools (e.g., Splunk, QRadar) Vulnerability scanners (e.g., Nessus, Qualys) Cloud & DevOps Integration Managing certificates in cloud platforms: Azure Key Vault AWS Certificate Manager Google Cloud Certificate Manager Integrating certificates into CI/CD pipelines and containerized environments (e.g., Kubernetes, Docker). Job Description Main Responsibilities: Certificate Lifecycle Management Request, issue, renew, and revoke digital certificates. Track certificate expiration dates and ensure timely renewals. Maintain an inventory of all certificates in use. Security and Compliance Enforce certificate policies and standards (e.g., key length, validity period). Ensure compliance with industry regulations (e.g., PCI-DSS, HIPAA, ISO 27001). Monitor for certificate misuse or compromise. PKI Infrastructure Management Manage internal Certificate Authorities (CAs) and subordinate CAs. Configure and maintain OCSP responders and CRL distribution points. Ensure high availability and security of PKI components. Incident Response Respond to certificate-related incidents (e.g., expired or compromised certificates). Revoke and reissue certificates as needed during security events. Collaboration and Support Work with DevOps, IT, and application teams to integrate certificates into systems. Provide guidance on certificate best practices and secure configurations. Documentation and Reporting Maintain documentation of certificate policies, procedures, and inventories. Generate reports on certificate usage, compliance, and risk. #J-18808-Ljbffr