IT Support

Qualifications

Technical and behavior abilities:

1. Have at least 3 - 5 years of hands-on experience in managing internal and external certificates.
2. Have at least 2 years of experience on any of the Certificate Authority – Digicert(preferred), Gandi or Global sign.
3. Preferably have at least 1-2 years in a multi-national company managing more than 1000 certificates.

Behavior abilities:

1.     Strong English verbal and written communication skills.

2.     A team player with the ability to drive projects and initiatives with peers.

1. Enjoy challenges and love applying technology to solve problems.
2. Self-Lead and Exceptional communication skills with diverse audiences - Strong critical thinking and analytical skills

Technical environment:

Public Key Infrastructure (PKI)

· Understanding of PKI concepts: asymmetric encryption, digital signatures, certificate chains.

· Experience with internal and external Certificate Authorities (CAs).

· Knowledge of X.509 certificate structure.

Certificate Lifecycle Management

· Issuance, renewal, revocation, and expiration tracking.

Familiarity with tools like:

· Digicert (required)

· Globalsign (required)

· OpenSSL

· HashiCorp Vault

· Venafi, Sectigo, Keyfactor Cryptography

· Knowledge of encryption algorithms (RSA, ECC, AES).

· Understanding of hashing (SHA-2, SHA-3) and digital signatures.

Operating Systems : Admin-level experience with:

· Windows Server (especially with Active Directory Certificate Services)

· Linux/Unix systems for managing certificates and services

Networking & Protocols

· Understanding of SSL/TLS, HTTPS, S/MIME, IPsec, and VPNs.

· Familiarity with protocols like OCSP, CRL, LDAP, and DNS.

Scripting & Automation

· Knowledge on scripting languages:

i.      PowerShell (especially for Windows environments)

ii.      Bash (for Linux)

iii.      Python (for automation and integration)

· Experience automating certificate issuance and renewal.

Security Tools & Platforms

· Experience with:

i.      Certificate management platforms

ii.      SIEM tools (e.g., Splunk, QRadar)

iii.      Vulnerability scanners (e.g., Nessus, Qualys)

Cloud & DevOps Integration

· Managing certificates in cloud platforms:

i.      Azure Key Vault

ii.      AWS Certificate Manager

iii.      Google Cloud Certificate Manager

iv.      Integrating certificates into CI/CD pipelines and containerized environments (e.g., Kubernetes, Docker).

Job Description

Main Responsibilities:

· Certificate Lifecycle Management

o    Request, issue, renew, and revoke digital certificates.

o    Track certificate expiration dates and ensure timely renewals.

o    Maintain an inventory of all certificates in use.

· Security and Compliance

o   Enforce certificate policies and standards (e.g., key length, validity period).

o   Ensure compliance with industry regulations (e.g., PCI-DSS, HIPAA, ISO

o   Monitor for certificate misuse or compromise.

· PKI Infrastructure Management

o   Manage internal Certificate Authorities (CAs) and subordinate CAs.

o   Configure and maintain OCSP responders and CRL distribution points.

o   Ensure high availability and security of PKI components.

· Incident Response

o   Respond to certificate-related incidents (e.g., expired or compromised certificates).

o   Revoke and reissue certificates as needed during security events.

· Collaboration and Support

o   Work with DevOps, IT, and application teams to integrate certificates into systems.

o   Provide guidance on certificate best practices and secure configurations.

· Documentation and Reporting

o   Maintain documentation of certificate policies, procedures, and inventories.

o   Generate reports on certificate usage, compliance, and risk.

· Nice to have:

o   Automation and Tooling

o   Implement and manage certificate management tools (e.g., Venafi, DigiCert, Sectigo).

o   Automate certificate discovery, issuance, and renewal processes.