Encryption SME with German or English

Arche Consulting Sp. z o.o.; Katowice; On-site; PLN 30,000 - 120,000; Full time

Job summary

A leading global IT consulting firm in Katowice is seeking an experienced PKI Engineer to manage enterprise PKI infrastructure and ensure secure certificate services. Ideal candidates will have 3-6 years of relevant experience and strong skills in Microsoft Certificate Authority, Thales HSM, and OpenSSL. The role includes troubleshooting, collaboration with teams, and maintaining regulatory compliance. Attractive benefits include permanent employment contract, medical care, and home office equipment.

Benefits

Permanent contract of employment

Equipment package for home office

Private medical care

Life insurance

Access to a benefit platform

Qualifications

• 3-6 years experience with PKI technologies.
• Strong knowledge of MS CA, Thales HSM, and OpenSSL.
• Familiarity with X.509 certificate formats and key management best practices.

Responsibilities

• Manage and maintain enterprise PKI infrastructure.
• Operate Thales HSMs for secure key storage.
• Develop and maintain scripts and tools using OpenSSL.

Skills

Public Key Infrastructure (PKI)

Microsoft Certificate Authority (MS CA)

Thales Hardware Security Modules (HSM)

OpenSSL

Scripting (PowerShell, Bash)

Problem-solving skills

Communication skills

Job description

Our Client is a global IT outsourcing and consulting company with around 50 years of successful history. The company is present in 50 countries and has 8 offices in Poland.

We are looking for candidates for an on-site position at office in Katowice.

We are seeking a skilled and experienced PKI Engineer to join our cybersecurity team. The ideal candidate will have a strong background in Public Key Infrastructure , with hands-on experience in Microsoft Certificate Authority (MS CA) , Thales Hardware Security Modules (HSM) , and OpenSSL . You will be responsible for maintaining secure certificate services across enterprise environments .

Responsibilities:

• manage and maintain enterprise PKI infrastructure, including MS CA and subordinate CAs,
• operate Thales HSMs for secure key storage and cryptographic operations,
• develop and maintain scripts and tools using OpenSSL for certificate lifecycle management,
• support certificate issuance, renewal, revocation, and auditing processes,
• collaborate with security, network, and application teams to ensure secure communications,
• monitor PKI health, performance, and compliance with internal and external standards,
• participate in incident response and troubleshooting related to certificate issues.

Requirements:

• minimum 3-6 years of experience working with PKI technologies,
• strong knowledge of MS CA, Thales HSM, and OpenSSL,
• familiarity with certificate formats (X.509), CRL, OCSP, and key management best practices,
• experience with scripting (PowerShell, Bash) and automation of PKI tasks,
• understanding of security frameworks and compliance requirements (e.g., ISO 27001, GDPR),
• excellent problem-solving and communication skills.

Nice to have:

• relevantcertifications(e.g., CISSP, GCPKI, MicrosoftCertified: Identity and Access Administrator),
• experiencewithCertificateTransparency, CAArecords, and PKI monitoringtools.

Our client offers:

• Permanent contract of employment,
• equipment package for home office,
• private medical care and life insurance,
• access to a benefit platform,
• possibility of using increased tax-deductible costs in the case of creative work.