This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The purpose of this role is to design, develop and engineer Cryptographic, PKI and Certificate management Systems alongside existing engineering team members fulfilling corporate requirements, policies and standards. The candidate will take part in defining cryptographic standards, architectures, and governance, and help develop Citi’s next generation crypto ecosystem, a large scale enterprise security solutions using the latest advancements in cryptography and information security and advanced algorithms.Certificate management engineering, focused on automated certificate management, deployment, renewal in various clients, applications operating systems; cryptographic protocols and controls, including but not limited to, post-quantum cryptography, PKI solutions, and strategic vendor interaction. The candidate’s responsibilities will also include working with advanced mathematical algorithms within PKI.The engineer will participant in device and user certificate management focusing on certificate lifecycle automation projects in Citi, including certificate automation for microservices, desktops, servers, Windows/Unix hosts, network security devices and other appliances.
Job Responsibility:
Design and introduce enterprise level certificate automation processes and solutions, which will include working on PKI architectures
Work with all disciplines, engineers, and operational product owners to integrate PKI and certificate management related technologies with Citi platforms to protect and manage the cryptography of mission critical systems
Perform product evaluation, testing and certification of PKI and Crypto technologies
Ensure that all security products meet or exceed Citi internal and regulatory requirements
Provide occasional 4th level support for the product toolset
Produce documentation of processes and procedures for the usage of the product
Follow the Technology Development Life Cycle in the development of all security tools
Requirements:
5-8 years of relevant experience in an Engineering role
Strong solid experience in cryptography, crypto protocols/algorithms and peripheral technologies
Must be familiar with information security concepts, best practices and solutions
Must have a strong engineer background
Database knowledge, preferably MSSQL and scripting background, preferably Powershell
Must have experience with PKI and a good understanding of cryptography, including the principles related to PKI, private keys, encryption methods, CRL, and advanced key usages
Understanding of Microsoft Windows and Unix operating systems
Sound security engineering principles as background to understanding the inner workings of the systems and controls that form an enterprise security ecosystem
Understanding of symmetric key encryption and asymmetric encryption
Bachelor’s degree/University degree or equivalent experience
Information Security Certification(s)
Nice to have:
Experience with commercial Certificate Authority (CA) products and/or certificate management systems
Experience with a variety of HSM platforms
Working with Trust Providers
Master’s degree
What we offer:
Cafeteria Program
Home Office Allowance (for colleagues working in hybrid work models)
Paid Parental Leave Program (maternity and paternity leave)
Private Medical Care Program and onsite medical rooms at our offices
Pension Plan Contribution to voluntary pension fund
Group Life Insurance
Employee Assistance Program
Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed
Flexible work arrangements to support you in managing work - life balance
Career progression opportunities across geographies and business lines
Socially active employee communities with diverse networking opportunities