Public Key Infrastructure (PKI) Specialist

A.P. Moller Maersk; Pune District, Bengaluru; On-site; INR 2,800,000 - 3,600,000; Full time

Job summary

A.P. Moller Maersk is seeking a Public Key Infrastructure (PKI) Specialist to drive delivery of secure identity services and reduce risk.

You will manage PKI-related incidents, automate certificate lifecycles, and collaborate with architects, engineers, and vendors to ensure robust, compliant solutions. You will work closely with the Service Owner and Product Owner to communicate risks, define scope, and implement high-quality PKI strategies while staying current with industry developments and

Qualifications

• 6+ years of experience with PKI, Access Management and Identity.
• Experience with certificate lifecycle management tools such as Venafi/Entrust.
• Knowledge of ADCS and its security implications.
• Experience with HSM technologies (Thales/Entrust).
• Strong scripting and automation capabilities.

Responsibilities

• Drive technical delivery for PKI initiatives and manage technical debt.
• Perform daily service checks and incident response for PKI services.
• Lead automation of certificate and key lifecycle management across Maersk.
• Collaborate with architects, engineers and vendors to deliver high-quality solutions.
• Document designs and ensure they meet current architectural standards.

Skills

PKI

Access Management

Identity

REST API

Scripting

Automation

Communication

Tools

Venafi

Entrust Key Control

ADCS

HSM Thales/Entrust

DNS Management

Job description

Job Summary

The Public Key Infrastructure (PKI) Specialist is responsible for driving the function towards successful technical delivery, utilising various programmes and operational support to increase capability and reduce risk. Managing technical debt and technology trade-offs, communicating those to the Service Owner ensuring implementation quality and that correct procedures are in place to assure code and feature quality. Working closely with other interdependent Engineering Managers to produce required design specifications and ensure operational solutions work together and fulfil business needs. Working with organisational resources outside the team to remove impediments and protect them from organisational bureaucracy. As a Public Key Infrastructure (PKI) Specialist, you will report directly to the Senior Manager of Cryptography Directory Services with the following tasks:

Key responsibilities

• Continuous service improvement: PKI is heavily used within Maersk, and you will strive to improve its performance and health daily.
• Performing daily service checks and fulfilling request tickets for DNS PKI.
• Responding to Incidents and Major Incidents in a timely manner to drive resolution
• Driving automation in certificate and key lifecycle management across Maersk
• The ability to extract data, generate reports which highlight where service improvements are required, and create opportunities for development and risk reduction.
• Develop or ensure documentation / code is at high standard and specification in accordance with current framework, working with the wider team and vendors to deliver.
• Build strong collaborative relationships with architects, designers, engineers, external agencies, vendor staff and partners.
• Build strong collaborative external relationships with industry experts.
• Develop scope definition, technical viability scoping and best practice solution design to meet the requirements
• Provide guidance to the Solution Architect in the development of solutions.
• Highlight all risks and issues that affect the development or deliveries
• Form strong and trusted relationship with the Product Owner; ensuring that the Product Owner is fully aware of the technical capabilities and shortcomings of the product allowing for sensible technical investment and debt repayment decisions
• Work across teams to define efficient solutions and implementation strategies to create highly cohesive implementation across products
• Share best technical practice across the team and develop others in their technical learning.
• Demonstrate interest in improving the company's technical awareness, depth and use of technology across the business.
• Participate in the evolution of company level best practices, standards, and policies related to software development.

We are looking for

Experience Technical Skills:

• A minimum of 6+ years' working with Public Key Infrastructure (PKI), Access Management and Identity in general
• Venafi and/or similar Certificate Lifecycle Management suite
• Entrust Key Control
• Knowledge of Microsoft's Active Directory Certificate Services, implementation and its security.
• Hardware Security Module (HSM) technology (Thales/Entrust)
• Managing Public Domain Names External DNS Records.
• Good experience in system integration using modern technologies e.g. REST API, MS Graph API and Log Analytics API
• Automation is key! You will have experience working with PKI to optimise and automate
• Highly skilled in writing clean, reusable and efficient script that is easy to read
• Deep knowledge and understanding of technology; a person who stays relevant with the latest technology advancements and trends
• Knowledge of Identity Access management solutions and protocols.
• Knowledgeable in cloud-based document management products.

Advantage if:

• Knowledge of DevOps or something similar
• Knowledge of ITIL v3
• Knowledge of auditing

Ways of working

• You are passionate about PKI, authentication, authorisation and security related to identity. You keep up with new developments within the identity world.
• Understand the principles of least privileges. We never give out more permissions than required!
• Understand that if something looks or feels wrong, then it probably is wrong!
• Willing to take ownership of a problem, even if no one is else is willing to do so.
• Highly motivated and work well under pressure
• Willing to keep up and learn new technology and understand how they will be beneficial to Maersk if implemented.
• Be concise and to the point.
• Have excellent communication skills. You will need to explain complex solutions to other engineers, end users, developers and management and can change the level of technical language used dependent on the target audience.
• You can articulate the risk of implementing or nor implementing a solution.
• Have excellent documentation skills. This could be when you are creating documentation for other engineers within Confluence, creating LLD's / HLD's, creating end user documentation or producing a read me file within source control.
• Structured, highly analytical mindset and excellent problem-solving skills. You will need to understand complex identity and attribute flows and be able to come to root cause very quickly.
• Collaborative, with strong facilitation and people skills / personal impact
• Willing to work on new technologies and languages outside of their core skillset
• Innovative, with the ability to think outside the box
• Fact-based and result oriented
• An individual who respects the opinion of others; yet can drive a decision through the team
• An individual who understands and respects the agile method
• An individual who wants to contribute to the wider engineering community to define best practices

Leader of people

• The ability to leads reviews of others' designs and software implementations
• The ability to engage the team to achieve goals.
• The ability to inspire fellow technical people