Sr. PKI, HashiCorp Operations Engineer

Capgemini; Buffalo (NY); On-site; USD 70,576 - 170,040; Full time

Benefits offered by this job

Medical, dental, vision coverage

401(k) retirement plan

Paid time off

Job summary

Capgemini is seeking an Analyst, Information Security Cryptography to safeguard systems, networks, and data. You will design and build information security capabilities, participate in operations, and serve as a trusted resource for other analysts.

You will lead on secrets management engineering, implement certificate lifecycle management, and contribute to procedures, standards, and documentation to maintain a mature security posture.

Qualifications

• Bachelor's degree or equivalent in a technical field with significant security experience.
• 5+ years of experience in PKI Hashicorp Operations and related security domains.
• Ability to lead remote offshore teams and deliver results.
• Certifications in audit, cloud, cybersecurity, governance, information security or privacy preferred.

Responsibilities

• Implement and provide ongoing DevSecOps/Operations support for a global secrets management service (Certificate Lifecycle Management/PKI).
• Provide ongoing DevSecOps/Operations support for a global Information Security Cryptography program (encryption, key/secrets management, tokenization).
• Lead on a team of secrets management engineers and contribute to documentation and standards.
• Help design, implement, and operate security measures protecting systems, networks, and data.
• Assist in disaster recovery planning and data backups as needed.
• Administer infrastructure related to API security, PKI, secrets management, monitoring, and access control.

Skills

PKI operations

HashiCorp Vault

Secrets management

Cloud (AWS/GCP/CD)**

Docker

Kubernetes

Java

Python

Linux

Encryption

CI/CD

Jenkins

Education

Bachelor's degree in Computer Science/Engineering

HS diploma + 5 years Information Security

Tools

API development

HashiCorp Vault

PKI/CLM technologies

Job description

Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you’d like, where you’ll be supported and inspired by a collaborative community of colleagues around the world, and where you’ll be able to reimagine what’s possible. Join us and help the world’s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.

• Ordering Fulfilment / Queue Management

Location

This is a remote role based in the USA.

About The Job You're Considering

The Analyst, Information Security Cryptography will play a key role in safeguarding the organizations systems, networks, and data. The position is responsible for aiding in the design and build of Information Security capabilities, participate in the management/operations of these capabilities, alongside supporting technologies. In addition, this role will be responsible for acting as a trusted resource for other analysts in the organization.

Your Role

• Implement and provide ongoing DevSecOps/Operations support for a global secrets management service using Certificate Lifecycle Management/PKI solutions and various data protection technologies
• Provide ongoing DevSecOps/Operations support for a global Information Security Cryptography Services program, which includes encryption, key/secrets management, tokenization, and various data protection technologies
• Participate as one of several technical leads on team of secrets management engineers
• Participate in authoring, editing, providing, or reviewing documentation (procedures, standards) to ensure a well-managed and mature security infrastructure
• Play a hands‑on role in the engineering, implementation, and operations of security measures that protect the computer systems, networks, and information
• Aid in disaster recovery planning and operations and data backups when needed
• Provide day-to-day administration and support for infrastructure related to API, application security, firewalls, encryption, intrusion detection systems, PKI, secrets management, vulnerability scanning, security monitoring tools, penetration testing, authentication, web filtering, identity management, or access control systems, and associated logs/processes
• Works closely with Information Security program manager, scrum master, and architects to convey technical impacts to development/engineering timeline and risks
• Work independently in identifying opportunities to improve operational or other performance for Security, Information Technology and other functions across Synchrony
• Work with Information Security Architects, Engineers, API developers to drive program delivery
• Work with Information Security leaders to drive secrets management development and standards across the organization
• Serve as subject-matter expert to other team members in the Information Security organization
• Perform other duties and/or special projects as assigned Analyst, Information Security Cryptography

Provide Certificate Management Activities, That Include

• Certificate/Key Management Lifecycles (i.e., SSH, TLS Certificates)
• Certificate/Key Management Policy, Process, & Template Development
• Documentation (Administrative & Technical)
• Managing User Issues with Certificates/Key Management Services
• Metrics, Monitoring, and Reporting
• Ordering Fulfilment / Queue Management
• PKI Infrastructure Management
• PKI Performance/SLA Reviews (Stakeholders)

Your Skills And Experience

• Bachelor's degree in Computer Science/Engineering or related field OR High School Diploma/GED and a minimum of 4 years or experience in Technology with a minimum of 5 years in Information Security.
• 5+ years of experience in PKI Hashicorp Operations
• Hands on - ability to lead and drive remote offshore teams and deliverables
• Good Customer managing experience. Delivery focused personnel with ability to solve complex problems and implement solutions.
• Certifications in audit, big data, cloud, cybersecurity, governance, information security, privacy, risk preferred; AWS, Cloudera, GCP, GIAC, ISC2, ISACA
• Excellent oral communication and writing skills. Adept and presenting complex topics, influencing and executing with timely / actionable follow-through
• Proficient hands on technical expertise with API, AWS, Cloudera, Docker, encryption, HashiCorp Vault, Kubernetes, Java, Linux, Perl, PKI, Protegrity, Python, secrets management, Thales/Vormetric, tokenization is strongly preferred
• Proven ability to organize/manage multiple priorities coupled with the flexibility to quickly adapt to ever-changing business needs.
• Strong analytical and problem-solving skills with the ability to convert information into practical deliverables. Uses rigorous logic and methods to solve difficult problems.

Desired Characteristics

• Ability to successfully manage working on multiple simultaneous projects
• DevOps, Engineering and/or Operations background
• Creativity and individual thinking, and the ability to work both with a team and unsupervised
• Familiarity with problem and incident management, change management, notifications, and basic operational understanding of running and maintaining infrastructure
• Good teamwork, oral and written communication
• Good understanding of security landscape as a whole
• Strong and efficient problem-solving and analytical skills, willingness to learn
• Working experience in modern coding languages such as Python
• Working experience with API development
• Working experience with CI/CD pipelines
• Working experience with Cryptography Management technologies
• Working experience with Jenkins
• Working experience with PKI, including CLM technologies
• Working experience with secrets management technologies
• Working experience with tokenization technologies
• Understanding of various cloud deployment/service models from a development, infrastructure and information security aspect

The base compensation range for this role in the posted location is: $70,176- $170,040.

Capgemini provides compensation range information in accordance with applicable national, state, provincial, and local pay transparency laws. The base compensation range listed for this position reflects the minimum and maximum target compensation Capgemini, in good faith, believes it may pay for the role at the time of this posting. This range may be subject to change as permitted by law.

The actual compensation offered to any candidate may fall outside of the posted range and will be determined based on multiple factors legally permitted in the applicable jurisdiction.

These may include, but are not limited to: Geographic location, Education and qualifications, Certifications and licenses, Relevant experience and skills, Seniority and performance, Market and business consideration, Internal pay equity.

It is not typical for candidates to be hired at or near the top of the posted compensation range.

In addition to base salary, this role may be eligible for additional compensation such as variable incentives, bonuses, or commissions, depending on the position and applicable laws.

Benefits

Capgemini offers a comprehensive, non‑negotiable benefits package to all regular, full‑time employees. In the U.S. and Canada, available benefits are determined by local policy and eligibility and may include:

• Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade, Company paid holidays, Personal Days, Sick Leave
• Medical, dental, and vision coverage (or provincial healthcare coordination in Canada)
• Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)
• Life and disability insurance
• Employee assistance programs
• Other benefits as provided by local policy and eligibility

Important Notice: Compensation (including bonuses, commissions, or other forms of incentive pay) is not considered earned, vested, or payable until it becomes due under the terms of applicable plans or agreements and is subject to Capgemini’s discretion, consistent with applicable laws. The Company reserves the right to amend or withdraw compensation programs at any time, within the limits of applicable legislation.

Capgemini is an Equal Opportunity Employer encouraging inclusion in the workplace. Capgemini also participates in the Partnership Accreditation in Indigenous Relations (PAIR) program which supports meaningful engagement with Indigenous communities across Canada by promoting fairness, accessibility, inclusion and respect. We value the rich cultural heritage and contributions of Indigenous Peoples and actively work to create a welcoming and respectful environment. All qualified applicants will receive consideration for employment without regard to race, national origin, gender identity/expression, age, religion, disability, sexual orientation, genetics, veteran status, marital status or any other characteristic protected by law.

This is a general description of the Duties, Responsibilities and Qualifications required for this position. Physical, mental, sensory or environmental demands may be referenced in an attempt to communicate the manner in which this position traditionally is performed. Whenever necessary to provide individuals with disabilities an equal employment opportunity, Capgemini will consider reasonable accommodations that might involve varying job requirements and/or changing the way this job is performed, provided that such accommodation does not pose an undue hardship. Capgemini is committed to providing reasonable accommodation during our recruitment process. If you need assistance or accommodation, please reach out to your recruiting contact.

Please be aware that Capgemini may capture your image (video or screenshot) during the interview process and that image may be used for verification, including during the hiring and onboarding process.

Click the following link for more information on your rights as an Applicant in the United States. http://www.capgemini.com/resources/equal-employment-opportunity-is-the-law

Capgemini is a global business and technology transformation partner, helping organizations to accelerate their dual transition to a digital and sustainable world, while creating tangible impact for enterprises and society. It is a responsible and diverse group of 340,000 team members in more than 50 countries. With its strong over 55-year heritage, Capgemini is trusted by its clients to unlock the value of technology to address the entire breadth of their business needs. It delivers end-to-end services and solutions leveraging strengths from strategy and design to engineering, all fueled by its market leading capabilities in AI, generative AI, cloud and data, combined with its deep industry expertise and partner ecosystem.