Overview
The role involves managing the full lifecycle of digital certificates and developing automation workflows for PKI environments. The purpose is to ensure the integrity and reliability of the organization’s PKI environment and support NATO’s Digital Endeavour.
Key Responsibilities
- Manage the full lifecycle of digital certificates, including issuance, renewal, revocation, and compliance auditing.
- Develop and implement automation workflows to streamline certificate management processes.
- Analyze PKI system performance and identify optimization opportunities.
- Contribute to ensuring high availability, resilience, and performance of PKI services.
- Support the automation of certificate management workflows using scripting and automation tools.
- Proactively monitor certificate health and identify potential expiration issues.
- Document actions taken and provide recommendations to stakeholders.
Required Experience
- 2 years post-related experience.
- At least 2 years of practical experience in designing, deploying, and supporting secure web services and associated architectures.
- Advanced expertise in PKI technologies, including X.509 digital certificates, Certificate Authorities, and supporting protocols such as OCSP, CRL distribution, and S/MIME.
- Strong background in cryptographic algorithms and security protocols such as TLS/SSL and IPsec.
- Proven capability in identifying, assessing, and mitigating security vulnerabilities.
- Minimum 2 years of experience managing Credential Management Systems (CMS).
- Skilled in troubleshooting certificate-related issues across multiple operating systems.
Qualifications
- Bachelor’s degree at a nationally recognised/certified University in a related discipline.
- Exceptionally, at least 6 years extensive and progressive expertise in duties related to the function of the post may compensate for lack of a university degree.
