Java Backend

Citi; Chennai District; On-site; INR 1,500,000 - 2,600,000; Full time

Job summary

Citi is seeking an engineer to design, develop and manage cryptographic, PKI and certificate management systems across Citi platforms. The role involves setting cryptographic standards, governance and building next‑gen crypto solutions for enterprise security.

Responsibilities include device and user certificate lifecycle automation, PKI deployment and integration, and ensuring products meet Citi security and regulatory requirements. Strong PKI, cryptography and scripting skills are essential.

Qualifications

• Strong cryptography and PKI knowledge.
• Experience with certificate management systems.
• Familiarity with information security concepts and best practices.
• Background as an engineer with security focus.
• Database knowledge (MSSQL) and scripting (PowerShell).
• Experience with commercial CA products is a plus.
• Windows and Unix OS understanding.

Responsibilities

• Design and introduce enterprise‑level certificate automation processes and PKI architectures.
• Evaluate, test and certify PKI and crypto technologies to meet Citi requirements.
• Collaborate with engineers and product owners to integrate PKI across Citi platforms.
• Provide 4th level support for product toolset when needed.
• Produce documentation for PKI processes and procedures.
• Follow the Technology Development Life Cycle for security tools.

Skills

Cryptography

PKI

Certificate management

Scripting

PowerShell

Information security

Education

Bachelor’s degree

Master’s degree (preferred)

Information Security Certification(s)

Tools

MSSQL

Job description

The purpose of this role is to design, develop and engineer Cryptographic, PKI and Certificate management Systems alongside existing engineering team members fulfilling corporate requirements, policies and standards.

The candidate will take part in defining cryptographic standards, architectures, and governance, and help develop Citi’s next generation crypto ecosystem, a large scale enterprise security solutions using the latest advancements in cryptography and information security and advanced algorithms.

Certificate management engineering focused on automated certificate management, deployment, renewal in various clients, applications and operating systems; cryptographic protocols and controls, including but not limited to, post‑quantum cryptography, PKI solutions, and strategic vendor interaction.

The candidate’s responsibilities will also include working with advanced mathematical algorithms within PKI. The engineer will participate in device and user certificate management focusing on certificate lifecycle automation projects in Citi, including certificate automation for microservices, desktops, servers, Windows/Unix hosts, network security devices and other appliances.

Responsibilities

• The candidate's primary responsibility will be to design and introduce enterprise‑level certificate automation processes and solutions, which will include working on PKI architectures as well.
• The candidate must have experience with PKI and a good understanding of cryptography, including the principles related to PKI, private keys, encryption methods, CRL, and advanced key usages.
• Work with all disciplines, engineers, and operational product owners to integrate PKI and certificate management related technologies with Citi platforms to protect and manage the cryptography of mission‑critical systems.
• Perform product evaluation, testing and certification of PKI and Crypto technologies. Ensure that all security products meet or exceed Citi internal and regulatory requirements.
• Provide occasional 4th level support for the product toolset.
• Produce documentation of processes and procedures for the usage of the product.
• Follow the Technology Development Life Cycle in the development of all security tools.

Qualifications

• Strong solid experience in cryptography, crypto protocols/algorithms and peripheral technologies is required.
• Must be familiar with information security concepts, best practices and solutions.
• Must have a strong engineer background.
• Database knowledge, preferably MSSQL and scripting background, preferably Powershell is required.
• Experience with commercial Certificate Authority (CA) products and/or certificate management systems is a plus.
• Understanding of Microsoft Windows and Unix operating systems.
• Sound security engineering principles as background to understanding the inner workings of the systems and controls that form an enterprise security ecosystem.
• Understanding of symmetric key encryption and asymmetric encryption.
• Experience with a variety of HSM platforms is a plus.
• Working with Trust Providers is a plus.

Education

• Bachelor’s degree/University degree or equivalent experience.
• Master’s degree preferred.
• Information Security Certification(s).

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi. View Citi’s EEO Policy Statement and the Know Your Rights poster.