Public Key Infrastructure (PKI) Specialist

APM Terminals Gothenburg; Bengaluru; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

Maersk seeks a Cyber - PKI Specialist to join the cryptography and directory services team. You will roll out and integrate PKI solutions and work with development teams across Copenhagen, the UK, and India to secure the IT landscape.

The role requires 6+ years in PKI/ID management, Venafi/Entrust experience, AD CS, HSM handling, DNS management, and strong automation with REST APIs. You will drive incidents, improve runbooks, and contribute to global IT security.

Qualifications

• 6+ years working with PKI, Access Management and Identity solutions.

Responsibilities

• Drive PKI program delivery and reduce risk with proper automation.

Skills

PKI

Access Management

Identity management

Venafi

Certificate Lifecycle

Entrust Key Control

ADCS

HSM

External DNS

REST API

Automation

Scripting

DevOps

ITIL v3

Auditing

Tools

REST API

MS Graph API

Log Analytics API

Job description

Cyber - Public Key Infrastructure (PKI) Specialist: Job Specification

Maersk is a $30bn organisation with 100,000 people that move 20% of the world’s trade, and the largest shipping and logistics company in the world and we are transforming our company into a global integrator of container logistics. We are offering you a unique opportunity to help shape that journey and the future organization. As a part of this process, you will have an opportunity to participate in a global IT transformation program that will set the direction of the future business model for this large global organization.

What We offer

As an organization with a global presence, joining Maersk is a wonderful and exciting opportunity for you to work with people of diverse talents & backgrounds. We offer a fast-paced, challenging, and truly international atmosphere with activities spread around the globe in Copenhagen, London, Charlotte, and India. The environment is dynamic with a focus on high performance, results, and respect for our employees. There will be the possibility of continuous professional and personal development and for gaining a professional and social network. As a company, we are committed to growing our people. We will provide you with opportunities that broaden your knowledge and strengthen your professional & technical skills.

Key Responsibilities

As a Public Key Infrastructure (PKI) Specialist, you will be part of a team responsible for rolling out and integrating various solutions into our IT Landscape. You will work independently and with development teams/stakeholders in various locations, e.g. Copenhagen and the UK.

The Public Key Infrastructure (PKI) Specialist is responsible for driving the function towards successful technical delivery, utilising various programmes and operational support to increase capability and reduce risk. Managing technical debt and technology trade-offs, communicating those to the Service Owner ensuring implementation quality and that correct procedures are in place to assure code and feature quality. Working closely with other interdependent Engineering Managers to produce required design specifications and ensure operational solutions work together and fulfil business needs. Working with organisational resources outside the team to remove impediments and protect them from organisational bureaucracy. As a Public Key Infrastructure (PKI) Specialist, you will report directly to the Senior Manager of Cryptography & Directory Services with the following tasks: Continuous service improvement: PKI is heavily used within Maersk, and you will strive to improve its performance and health daily. Performing daily service checks and fulfilling request tickets for DNS & PKI. Responding to Incidents and Major Incidents in a timely manner to drive resolution Driving automation in certificate and key lifecycle management across Maersk The ability to extract data, generate reports which highlight where service improvements are required, and create opportunities for development and risk reduction. Develop or ensure documentation / code is at high standard and specification in accordance with current framework, working with the wider team and vendors to deliver.

Build strong collaborative relationships with architects, designers, engineers, external agencies, vendor staff and partners. Build strong collaborative external relationships with industry experts. Develop scope definition, technical viability scoping and best practice solution design to meet the requirements Provide guidance to the Solution Architect in the development of solutions. Highlight all risks and issues that affect the development or deliveries Form strong and trusted relationship with the Product Owner; ensuring that the Product Owner is fully aware of the technical capabilities and shortcomings of the product allowing for sensible technical investment and debt repayment decisions Work across teams to define efficient solutions and implementation strategies to create highly cohesive implementation across products Share best technical practice across the team and develop others in their technical learning. Demonstrate interest in improving the company’s technical awareness, depth and use of technology across the business. Participate in the evolution of company level best practices, standards, and policies related to software development.

We are looking for

Experience & Technical Skills: A minimum of 6+ years’ working with Public Key Infrastructure (PKI), Access Management and Identity in general Experience with Venafi and/or similar Certificate Lifecycle Management suite Experience in Key Management System (Entrust Key Control) Knowledge of Microsoft’s Active Directory Certificate Services, implementation and its security. Experience Managing & configuring Hardware Security Module (HSM) technology (Thales/Entrust) Experience with managing Public Domain Names & External DNS Records. Good experience in system integration using modern technologies e.g. REST API, MS Graph API and Log Analytics API Automation is key! You will have experience working with PKI to optimise and automate Highly skilled in writing clean, reusable and efficient script that is easy to read Deep knowledge and understanding of technology; a person who stays relevant with the latest technology advancements and trends Knowledge of Identity Access management solutions and protocols. Knowledgeable in cloud-based document management products. Advantage if: Knowledge of DevOps or something similar Knowledge of ITIL v3 Knowledge of auditing.

Ways of Working

You are passionate about PKI, authentication, authorisation and security related to identity. You keep up with new developments within the identity world. Understand the principles of least privileges. We never give out more permissions than required! Understand that if something looks or feels wrong, then it probably is wrong! Willing to take ownership of a problem, even if no one is else is willing to do so. Highly motivated and work well under pressure Willing to keep up and learn new technology and understand how they will be beneficial to Maersk if implemented. Be concise and to the point. Have excellent communication skills. You will need to explain complex solutions to other engineers, end users, developers and management and can change the level of technical language used dependent on the target audience. You can articulate the risk of implementing or nor implementing a solution. Have excellent documentation skills. This could be when you are creating documentation for other engineers within Confluence, creating LLD’s / HLD’s, creating end user documentation or producing a read me file within source control. Structured, highly analytical mindset and excellent problem-solving skills. You will need to understand complex identity and attribute flows and be able to come to root cause very quickly. Collaborative, with strong facilitation and people skills / personal impact Willing to work on new technologies and languages outside of their core skillset Innovative, with the ability to think outside the box Fact-based and result oriented An individual who respects the opinion of others; yet can drive a decision through the team An individual who understands and respects the agile method An individual who wants to contribute to the wider engineering community to define best practices Leader of people: The ability to leads reviews of others’ designs and software implementations The ability to engage the team to achieve goals. The ability to inspire fellow technical people.

Equal Opportunity Employer Statement

Maersk is committed to a diverse and inclusive workplace, and we embrace different styles of thinking. Maersk is an equal opportunities employer and welcomes applicants without regard to race, colour, gender, sex, age, religion, creed, national origin, ancestry, citizenship, marital status, sexual orientation, physical or mental disability, medical condition, pregnancy or parental leave, veteran status, gender identity, genetic information, or any other characteristic protected by applicable law. We will consider qualified applicants with criminal histories in a manner consistent with all legal requirements. We are happy to support your need for any adjustments during the application and hiring process. If you need special assistance or an accommodation to use our website, apply for a position, or to perform a job, please contact us by emailing [e-mail].

About Maersk

A.P. Moller - Maersk is an integrated container logistics company working to connect and simplify its customer's supply chains. As the global leader in shipping services, the company operates in 130 countries and employs roughly 100,000 people. With simple end-to-end offering of products and digital services, seamless customer engagement and a superior end-to-end delivery network, Maersk enables its customers to trade and grow by transporting goods anywhere - all over the world.