Senior IT Security Consultant (PKI / TLS Certificates) - Gdynia

DCG Poland; Gdynia; Hybrid; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Private medical care

Co‑financing for the sports card

Dedicated consultant support

Job summary

DCG Poland is seeking an experienced Senior IT Security Consultant (PKI / TLS Certificates) in Gdynia to lead complex certificate lifecycle initiatives and strengthen our clients' security posture.

You will drive PKI design, manage TLS/ mTLS deployments, conduct certificate discovery, assess risks, and present clear guidance to applications, tech teams, and management. The role requires 5+ years in PKI, deep knowledge of CA concepts, and excellent English communication.

Qualifications

• 5+ years IT experience with hands-on PKI and certificate lifecycle management.
• Deep knowledge of PKI concepts, including CA, trust chains, and issuance policies.
• Strong TLS/mTLS understanding and certificate handling across environments.
• Ability to communicate findings clearly to technical and management audiences.

Responsibilities

• Drive and support implementation of global industry mandate on Client Authentication EKU removal.
• Ensure proper certificate trust configuration for internal and external services.
• Provide training and guidance to application teams on certificate changes and best practices.
• Conduct discovery of digital certificates across the organization.
• Propose remediation actions and improvements to certificate management.

Skills

PKI

TLS certificates

Certificate lifecycle

mTLS

CA concepts

Trust models

OS & networks

Security risk analysis

Communication skills

English proficiency

Job description

Senior IT Security Consultant (PKI / TLS Certificates)

Position: Senior IT Security Consultant (PKI / TLS Certificates)

Job location: Gdynia

As a recruitment company, DCG understands that every business is powered by experienced professionals. Our management style and partnership approach enable us to meet your needs and provide continuous support. Due to our ongoing growth and the large number of recruitment projects we undertake for our partners, we are currently looking for:

Senior IT Security Consultant (PKI / TLS Certificates)

Responsibilities:

• Drive and support the implementation of the global industry mandate regarding Client Authentication EKU removal from TLS public certificates
• Implement solutions ensuring proper trust configuration for both inward- and outward-facing services
• Provide communication, support, and training for application teams and other organizational units regarding required certificate changes and best practices
• Conduct discovery of digital certificates used across the organization
• Evaluate both existing internal tools and potential external solutions for certificate discovery
• Analyze discovered certificates to identify types, non-compliances, and potential risks
• Propose remediation actions and improvements to certificate management practices
• Analyze technical environments and assess risks related to certificate lifecycle management
• Plan and coordinate activities to minimize service disruptions
• Review technical solutions and analyze relevant technical data and documentation
• Clearly communicate objectives, technical findings, and recommendations to a wide audience including application teams, technical specialists, and management
• Prepare documentation, presentations, and guidance materials for internal stakeholders
• Collaborate with cross-functional teams to ensure successful implementation of security initiatives

Requirements:

• 5+ years of experience in the IT industry, including hands-on experience in Public Key Infrastructure (PKI) and certificate lifecycle management
• Strong knowledge of Public Key Infrastructure concepts, including certificate lifecycle management and certificate trust models
• Understanding of public and private Certificate Authorities (CA), including trust chains, root certificates, and issuance policies
• Solid understanding of TLS protocol, including TLS handshake and mutual TLS (mTLS) authentication mechanisms
• Good understanding of operating systems and infrastructure components, including networks, certificates, domains, and related security mechanisms
• Strong analytical and problem-solving skills, with the ability to navigate complex technical environments and regulatory requirements
• Ability to assess technical solutions, analyze data files, and identify potential security risks or non-compliances
• Strong planning and organizational skills, with the ability to coordinate activities in order to prevent service disruptions
• Experience in risk assessment and proposing mitigation strategies related to security and infrastructure changes
• Strong communication and presentation skills, with the ability to clearly explain technical concepts to both technical teams and management
• Ability to work independently and collaboratively, with a proactive and solution-oriented mindset
• Very good command of English (oral and written)

Nice to have:

• Knowledge of cryptographic algorithms, key types, and key management systems

Offer:

• Private medical care
• Co‑financing for the sports card
• Constant support of dedicated consultant