IT Consultancy

Vector Synergy; Brussel; On-site; EUR 50,000 - 70,000; Full time

Job summary

Vector Synergy is seeking a qualified individual for a role in Brussels, Belgium focused on PKI health checks and governance. Key responsibilities include renewing Entrust Issuing Certificate Authority certificates, performing PKI assessments, and configuring BEPKI environments. Candidates should have education in CIS security and three years of relevant experience, alongside familiarity with NATO security policies. A NATO Secret clearance is necessary for this role. Contact for further information.

Qualifications

• At least three years of relevant experience with Entrust Certificate Management system, Thales HSM module, and mid-size federated PKI solutions.
• Demonstrable experience in drafting technical documentation and training materials related to PKI authorities.

Responsibilities

• Renew existing Entrust Issuing CA & Thales HSM Tokens.
• Perform a comprehensive PKI assessment of technical implementation and documentation.
• Configure BEPKI Option A in production and testing environments.

Skills

Entrust Certificate Management system

Thales HSM module

mid-size federated PKI solutions

CIS security and cyber defence

Technical documentation drafting

Education

Education in CIS security and cyber defence disciplines

Job description

Location

Brussels, Belgium

Security Clearance

NATO Secret

Reference No

VS/BIC-12 / Brussels

Deadline for Application

29.04.2026

Qualifications

• Education in CIS security and cyber defence disciplines;
• At least three years (within the last ten) of relevant experience with Entrust Certificate Management system, Thales HSM module, and mid-size federated PKI solutions;
• Demonstrable experience in the drafting of technical documentation and training materials related to PKI authorities e.g., CA, Issues CA, RA.

Desirable

• Familiarity with NATO security policy; and awareness of NATO’s military and civilian structure and activities.

Duties / Role

• WP1 – Renew existing Entrust Issuing CA & Thales HSM Tokens:
  • Renewing Entrust Issuing Certificate Authority certificates and keys;
  • Ensuring renewal is performed without invalidating existing BEPKI certificates;
  • Confirming Security Officer accounts can log in to EASMA;
• WP2 – PKI Health Check & PKI Governance:
  • Performing a comprehensive PKI assessment of technical implementation and documentation;
  • Reviewing PKI design documentation and standard operating procedures;
  • Reviewing BEPKI policies;
• WP3 – BEPKI Option A Configuration:
  • Configuring BEPKI Option A in production environments;
  • Configuring BEPKI Option A in testing (OTVF) environments;
  • Configuring web-based Entrust Administration Services (EAS) to support national and organizational Ras.

Additional Information

If you are interested, for further information, please contact the point of contact for this offer.