PKI Security Engineer

offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).

The impact you will have in this role:

As an Associate on our PKI Engineering team, you will significantly contribute to the advancement of our Public Key Infrastructure. You will be involved in the design, implementation, and maintenance of our PKI systems, leveraging your skills to enhance security and operational efficiency. Utilizing tools such as Venafi, ADCS, and HSMs, and automating processes with Ansible, Terraform, and PowerShell, you will streamline our certificate management lifecycle. Your efforts will directly impact DTCC's cybersecurity framework, ensuring robust and efficient PKI operations. In our fast-paced team environment, you will have extensive opportunities for professional growth and development.

Your Primary Responsibilities:

• Support CLM for certificates in use in our environment

• Maintain and update the PKI systems

• Develop and enforce security policies related to key management encryption standards

• Resolve issues related to PKI and assist in certificate related issues to maintain seamless operations of the secure systems

**NOTE: The Primary Responsibilities of this role are not limited to the details above. **

Qualifications:

• Minimum 4 years of related experience

• Bachelor's degree (preferred) in Computer Science, Information Technology, Cybersecurity, or a related field

• Solid understanding of PKI concepts and experience working with certificate inventory management systems, RAs, ADCS, HSMs, Ansible, Terraform, and PowerShell for automation

• Certifications such as CompTIA Security+, CISSP, or similar are highly beneficial

• Proactive approach to learning with the ability to thrive in a dynamic, fast-paced team environment

Talents Needed for Success:

• Strong Information Security experience, specifically in multi-tier PKI/Cryptography environment

• Demonstrated experience with configuring certificate authorities, templates and resolving certificates (TLS handshakes)

• Proficient in using PKI tools like RAs, ADCS, and HSMs, along with automation tools such as Ansible, Terraform, and PowerShell

• Strong analytical skills to diagnose and resolve complex PKI-related technical issues

• Meticulous approach to managing and automating certificate lifecycle processes

• Ability to quickly adapt to new technologies and evolving technical environments

We offer top class training and development for you to be an asset in our organization!

The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.