Java Backend (Cybersecurity) - Assistant Vice President

Certificate managementengineering, focused onautomated certificate management, deployment, renewal in various clients, applications operating systems;cryptographic protocolsand controls, including but not limited to, post-quantum cryptography, PKI solutions, and strategic vendor interaction.  

Thecandidate’s responsibilitieswill also includeworking with advanced mathematical algorithmswithinPKI.Theengineerwill participant indevice and usercertificatemanagementfocusing oncertificatelifecycleautomationprojects in Citi, includingcertificate automation for microservices, desktops, servers, Windows/Unix hosts,network securitydevicesand otherappliances.

Responsibilities:

• The candidate's primary responsibility will be todesign and introduce enterprise level certificate automation processes and solutions,which will include working on PKI architecturesas well.

• The candidate must have experience with PKI andagoodunderstanding of cryptography, includingthe principles related to PKI, private keys, encryption methods, CRL, and advanced key usages. 

• Work with all disciplines, engineers, and operational product owners to integrate PKI and certificate management related technologies with Citi platforms to protect and manage the cryptography of mission critical systems. 

• Perform product evaluation, testing and certification of PKI and Crypto technologies. Ensure that all security products meet or exceed Citi internal and regulatory requirements.

• Provide occasional 4th level support for the product toolset. 

• Produce documentation of processes and procedures for the usage of the product. 

• Follow the Technology Development Life Cycle in the development of all security tools.​

Qualifications:

• Strong solid experience in cryptography,crypto protocols/algorithmsand peripheral technologies isrequired.

• Must be familiar with information security concepts, bestpracticesandsolutions.  

• Must have a strongengineerbackground

• Database knowledge, preferably MSSQL and scripting background, preferablyPowershellisrequired. 

• Experience withcommercial Certificate Authority (CA)products and/orcertificate management systemsis a plus.

• Understanding of Microsoft Windowsand Unixoperating systems

• Sound security engineering principles as background to understanding the inner workings of the systems and controls that form an enterprise security ecosystem

• Understanding of symmetric key encryptionand asymmetricencryption

• Experience with a variety of HSM platformsis a plus

• Working with Trust Providers is a plus.

​

Education:

• Bachelor’s degree/University degree or equivalent experience

• Master’s degree preferred

• Information Security Certification(s)