L3 Engineer Enterprise PKI Solutions

Hi-Tech Solutions; Newark (CA); On-site; USD 90,000 - 120,000; Full time

Job summary

A leading offshore IT and software development firm seeks a candidate to manage cryptographic solutions and conduct comprehensive security assessments. Responsibilities include leading multiple GRC related tasks, designing and implementing Enterprise PKI solutions, and coordinating audits. The ideal candidate should possess in-depth knowledge of cryptographic concepts and compliance requirements like PCI DSS. This is an excellent opportunity for a motivated individual to contribute significantly to security processes.

Qualifications

• Thorough understanding of cryptographic concepts and related technologies.
• Hands-on experience in designing and managing cryptographic solutions.
• Experience integrating PKI solutions with SSL/TLS.

Responsibilities

• Manage multiple GRC related tasks and audits.
• Design and implement Enterprise PKI solutions.
• Coordinate risk assessments and document findings.

Skills

Cryptographic solutions understanding

Encryption algorithms knowledge

Public Key Infrastructure experience

Knowledge of regulatory compliance (PCI DSS/HIPPA)

Network technologies understanding

Job description

Leading Offshore IT & Software Development Outsourcing Company offers various services like software consulting, application development, etc.

Job Description

• Communicating and coordinating with internal technical teams
• Obtaining and reviewing supporting documentation
• Performing assessments (where necessary) and publishing reports
• Summarizing the adequacy of security controls
• Outlining gaps & remediation steps to develop practical recommendations
• Evaluating internal compliance to regulations such as SOX, PCI, HIPPA & SSAE 16
• Capturing assessment results in centralized repository
• Document new processes and workflows while maintaining / improving on existing processes and workflows
• Effectively lead & manage multiple projects without a great deal of direction or oversight
• Interact with team members and department/division personnel in a professional and mature manner
• Coordinate enterprise information security risk assessments
• Catalog, track and report the status of risk assessments and resolution actions
• Propose risk mitigations based on cost, benefit and risk
• Keep abreast of current developments and emerging issues and risks both within the technology organization and the information technology industry, and apply gained knowledge to risk assessments

Qualifications

Technical skill set

• Should have thorough understanding about cryptographic solutions being used in IT industry
• Should have thorough understanding about cryptographic concepts such as encryption algorithms, hashing algorithms, digital signatures, nonrepudiation, certificate authority, and related technologies
• Should have deep knowledge and hands‑on experience in designing, implementing and managing cryptography based solutions such as Public Key Infrastructure (MUST), file integrity solutions, HSM’s for secured storage of keys
• Should have thorough understanding about PKI components such as Root CA, Intermediate or Subordinate CA, Issuing CA, Policy CA, CRL, and relevant protocols such as OCSP, SCEP
• Should have experience integrating PKI solutions with applications/solutions based on standard protocols such as SSL/TLS - Client/Server authentication/session encryption, SMIME
• Should have conceptual level understanding of network technologies - basic routing and switching
• Should have good understanding about PCI DSS/HIPPA/DPA and other leading compliance requirements
• Should understand customer’s requirements & transform them into technical controls or solutions
• Should understand product licensing/bill‑of‑material/part codes

Project Specific Responsibilities

• Managing several GRC related tasks simultaneously without a great deal of direction or oversight
• Interacting with team members and department/division personnel on other GRC related tasks
• Managing audits and coordinating with external auditors
• Design, implement and manage Enterprise PKI solutions
• Prepare Technical Solution Design Documents and Project Plans
• Work with Customer’s Architecture team to finalize the solution deployment design
• Validate Bill of Material/Bill of Quantity against deliverables
• Document high‑light key risks/issues, mitigation steps, and dependencies on customer/other teams
• Work with Program Manager for timely updates/tracking of deliverables
• Ensure that project implementation is completed within defined timelines
• Manage resources assigned to project effectively
• If any delays, prepare gap‑analysis and raise alarms in project review meetings – internal/external
• Managing various sign‑offs/milestone achievement records, sharing with Sales Account Manager/Finance guys for billing/invoicing

Additional Information

Hi-Tech Solutions, Inc. (HTS)