12 Jun
PKI Engineer
Vacancy expired!
PKI Engineer (Analyst-IS-Senior) Requisition
268788 Location: VA-Richmond, CO-Denver, GA-Atlanta, IL-Chicago, MO-Kansas City, TX-Dallas, MD-Baltimore, NY-New York City, MO-St. Louis, OH-Cleveland, NC-Charlotte, MA-Boston, MN-Minneapolis, PA-Philadelphia (Remote candidate acceptable) The Richmond Fed is the proud home of the Federal Reserve's National IT organization-a nationwide team delivering technology solutions and support across the Federal Reserve System. Many National IT employees are located in Richmond, while others are based across the U.S. at other Federal locations. When you join our team, you'll become part of a culture that welcomes differences, cares about our communities, and empowers each other to lead from where we are to make things better. Bring your passion and we'll provide challenging and purposeful careers in a variety of fields, opportunities to grow and a wide range of benefits and perks that support your health and wealth. It's all part of what makes #MyRichmondFed a great place to work! About the Opportunity The Encryption and Key Management product team has an immediate opening for a PKI Engineer (Analyst-IS-Senior). Work in a dynamic Encryption and Key Management product team to support and automate certificate and key lifecycle management tools and systems. Be at the forefront of new crypto technologies and tools. What You Will Do:- Deploy and maintain various certificate and key lifecycle management tools and systems in a complex on-prem and hybrid cloud environments
- Improve and reduce manual certificate and key lifecycle management activities through automation, guidance and documentation
- Consult with other members of product team and end users to identify PKI requirements and develop requirements documentation
- Contribute to the technical direction on all areas of PKI architecture, including policies, standards, strategies, automation and governance
- Provide guidance to key stakeholders on PKI lifecycle, processes and procedures
- Bachelor's Degree or equivalent experience with 5 years of relevant work experience.
- Prefer understanding of Public Key Infrastructure (PKI) including technology, standards, and implementations, with experience managing, configuring, or supporting a PKI certificate authority
- Prefer experience with certificate management tools ( Venafi , Entrust, MS CA, AWS CA )
- Prefer expertise in designing, engineering, implementing, operating and supporting a Cryptographic Infrastructure consisting of such elements as; Enterprise Key Management System (EKMS), Public Key Infrastructure (PKI), Validation Authority (VA), Hardware Security Modules (HSM) for Data-at-Rest, Data-in-Transit and Data-in-Use.
- A solid understanding of Windows/LINUX OS and AWS environment, particularly crypto implementations
- Experience with access management and LDAP components are preferred. Knowledge of/or experience with web servers and services as well as support for middleware infrastructure components and messaging technologies.
- Demonstrable ability to solve problems and automate tasks programmatically
- Familiarity with infrastructure as code tools (CloudFormation, Azure Resource Manager, Terraform)
- CISSP, Certified Cloud Security Professional (CCSP) and AWS Cloud certification desirable
- Experience developing solutions in an iterative (Agile) approach
- Great medical benefits
- Pension and 401(k) with employer match
- Generous paid time off
- Tuition reimbursement
- Employee resource networks
- Paid volunteer leave
- Flexible work options
- Onsite amenities that make working here fun
- Candidates should review the Bank's Employee Code of Conduct to ensure compliance with conflict of interest rules and personal investment restrictions. The Code is available on the About Us, Careers webpage at www.richmondfed.org .
- Sponsorship is not available for this role.
- Selected candidate is subject to special background check procedures.
- Salary offered will be based on the job responsibilities and the individual's knowledge, skills, and experience as defined in the job qualifications/experience.
Vacancy expired!