PKI Engineer - Java /Cloud Expert

Citigroup Inc.; Chennai District; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Citi is seeking a Cryptography and PKI Systems Engineer in India to design and implement enterprise-grade cryptographic and PKI solutions. You will automate certificate management for microservices, desktops, servers, and cloud platforms while aligning with Citi security policies and standards.

The role requires hands-on Java development with exposure to C# and Python, plus strong cryptographic knowledge. Collaboration across teams and a strong security mindset are essential.

Qualifications

• Understanding of Windows operating systems.
• Understanding of Linux.
• Understanding of cryptographic protocols.
• Object oriented programming experience.
• Programming in Python.
• Knowledge of Crypto Libraries (Bouncy Castle).
• Sound security engineering principles.
• Symmetric key encryption and Asymmetric encryption.
• Cloud

Responsibilities

• Develop enterprise-level cryptographic architectures with a focus on PKI and automation.
• Perform product evaluation, testing, and certification of PKI/Crypto technologies.
• Provide 4th level support for the product toolset.
• Produce documentation of processes and procedures for the usage of the product.
• Follow the Technology Development Life Cycle in security tool development.

Skills

Java

C#

Python

Cryptography

PKI

Cloud

Windows

Linux

Security concepts

Object oriented programming

Education

Bachelor's degree

Master's degree preferred

Tools

Bouncy Castle

Job description

The purpose of this job is to develop and engineer Cryptography and PKI Systems, support middleware integrations using Java alongside existing team members fulfilling corporate requirements, policies and standards.
Take part in defining cryptographic standards, architectures, and governance, develop large scale enterprise security solutions using advancements in cryptography and information security, work with advanced algorithms.

Cryptographic engineering developer with hands on experience in Java. The engineer will work on emerging technology and exciting area of next generation security ecosystem.

The job will also involve working with advanced mathematical algorithms , cloud experience and is generally known to provide good job satisfaction for the right candidate meeting our Citi and team culture fitness requirements.

The engineer will focus on certificate automation projects in Citi, including certificate automation for microservices, desktops, servers, Windows, Unix hosts, firewalls, appliances and other citi infrastructure and various cloud platforms.

Responsibilities:

• The candidate's primary responsibility will be to develop solutions at the enterprise level, which will include working on cryptographic architectures with main focus on automation in the PKI & cryptography engineering space.
• The candidate must have a basic understanding of cryptographic concepts and its pillars. Knowledge of principles related to PKI, private keys, encryption methods, CRL, and advanced key usages is good to have.
• They must be familiar with information security concepts and products.
• They must have strong development background in C# and Python.
• A sound knowledge of secure development technologies, object oriented programming and shift left is required.
• Work with all disciplines, engineers, and operational product owners to integrate PKI and certificate management related technologies with Citi platforms to protect and manage the cryptography of mission critical systems.
• Perform product evaluation, testing and certification of PKI and Crypto technologies. Ensure that all security products meet or exceed Citi internal and regulatory requirements.
• Provide occasional 4th level support for the product toolset.
• Produce documentation of processes and procedures for the usage of the product.
• Follow the Technology Development Life Cycle in the development of all security tools.

Qualifications:

• Understanding of Microsoft Windows operating systems
• Understanding of Linux
• Understanding of cryptographic protocols
• Object oriented Programming Experience
• Programming in Python
• Knowledge of Crypto Libraries (Bouncy Castle)
• Sound security engineering principles as background to understanding the inner workings of the systems and controls that form an enterprise security ecosystem
• Symmetric Key Encryption
• Asymmetric Encryption
• Cloud

Education:

• Bachelor's degree/University degree or equivalent experience
• Master's degree preferred

Technology

Job Family Group:

Technology

Job Family:

Systems & Engineering

Time Type:

Full time

Most Relevant Skills

Please see the requirements listed above.

Other Relevant Skills

For complementary skills, please see above and/or contact the recruiter.

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View Citi's EEO Policy Statement and the Know Your Rights poster.