公钥基础设施（PKI）安全管理员
Public Key Infrastructure (PKI) Security Administrator
Tetrad Digital Integrity (TDI) 是一家领先的网络安全公司，致力于在当今数字化时代保护客户免受不断增加的威胁和漏洞的影响。我们正在招聘一位高级公钥基础设施（PKI）安全管理员。PKI 通过公钥密码学实现安全通信和数据交换，并支持身份验证、加密和数字签名等应用
职责：
· 执行证书操作职责、客户服务、报告和文档编写
- 管理 PKI 团队，为复杂到极其复杂的项目制定需求，并为项目和计划人员提供战略和专家建议及技术指导
- 为关键利益相关者提供 PKI 生命周期、流程和程序的指导和培训。该职位还负责对客户特定或任务关键的问题/挑战进行详细分析、评估和改进建议、优化开发和/或维护工作
- 支持使用 Venafi 自动化证书，并具备向 AI 技术过渡的知识
- 为 USPS 所有应用程序/服务提供基于证书的客户服务
任职要求：
· 计算机或其它 IT、安全相关专业学士学位，或同等学历，9 年以上相关经验
- 熟悉 REST API 集成、简单证书注册协议（SCEP）以及 MS AD 自动注册和 PKI
- 了解以下部分技术：VCERT、Portable GIT、Ansible 和 Visual Studio Code
- 了解 PowerShell 脚本
- 具备以下任一或组合的基础设施经验：IT 系统管理员、服务器管理员、网络、Active Directory/LDAP、Unix/Linux 或虚拟化和访问控制管理
- 具备与 IT 客户、开发人员和系统管理员有效沟通的强项
- 熟悉证书管理工具（理想情况下为 Venafi、Microsoft CA 和 HSM）
- 具备解决数字证书问题的经验，并能够向 AI/自动化方向发展
优先考虑：
· 证书注册 Web 服务和策略 Web 服务
- 活动目录证书服务（ADCS）监控
- 在企业环境中具有 IT 系统管理经验（系统管理、网络、防火墙）
- 基础设施 IT（系统管理、网络管理）
查看英文原文
Tetrad Digital Integrity (TDI) is a leading-edge cybersecurity firm with a mission to safeguard and protect our customers from increasing threats and vulnerabilities in this digital age. We are currently recruiting for a Senior level Public Key Infrastructure (PKI) Security Administrator. PKI enables secure communication and data exchange using public key cryptography and supports areas like: authentication, encryption and digital signatures.
RESPONSIBILITIES:
· Perform certificate operational duties, customer support, reporting and documentation
- Supervise PKI team, develop requirements for projects for complex to extremely complex programs; and provide strategic and expert advice and technical guidance, to program and project staff.
- Provide guidance and training to key stakeholders on PKI lifecycle, processes and procedures. This individual also provides detailed analysis, evaluation and recommendations for improvements, optimization development, and/or maintenance efforts for client-specific or mission critical challenges/issues
- Provide support for automating certificates with Venafi, with the knowledge of moving towards AI to support automation.
- Provide customer support for all of USPS applications / services using certificates
QUALIFICATIONS:
· Bachelor’s degree in computers or other IT, Security related major or equivalent experience with 9+ years’ relevant experience
- Solid understanding of REST API Integration, Simple Certificate Enrollment Protocol (SCEP), and MS AD Auto-Enrollment and PKI
- Understanding of some of the following technologies: VCERT, Portable GIT, Ansible and Visual Studio Code
- Understanding of PowerShell scripting
- Infrastructure experience with one or more in any combination of the following: IT Sys Admin, Server Admin, Networking, Active Directory/LDAP, Unix/Linux or Virtualization and Access control administration
- Strong communication skills in working with IT customers, developers and system administrators
- Experience with certificate management tools (ideally Venafi, Microsoft CA and HSM)
- Experience troubleshooting digital certificate issues, with the ability to move towards AI/Automation
DESIRED QUALIFICATIONS:
· Certificate Enrollment Web Service & Policy Web Service
- Active Directory Certificate Services (ADCS) monitoring
- IT system administration experience (systems management, networks, firewalls) in an enterprise environment
- Infrastructure IT (Systems Administration, Network Administration Windows/Linux OS, Network Administration, Active Directory and/or Virtualization).
- Experience with user directory technologies for authentication (e.g., LDAP, Active Directory)
- Experience with Microsoft Windows Server configuration, deployment, and troubleshooting.
- Experience with Unix and Linux configuration and troubleshooting
- Experience with technologies that use TLS/SSL encryption (e.g., F5, Netscaler, IIS, Apache, WebLogic, WebSphere, etc.)
- Experience with ServiceNow or other Change/Incident/Problem management ticketing technology
- PKI experience including hands on experience with: Certificate Authority Administration, Certificate Enrollment Web Service and Policy Web Service
- Demonstrated proficiency with server virtualization technologies (VMWare, HyperV)
TDI does business with the federal government, which restricts employment to individuals who are either US citizens or lawful permanent residents of the United States.
“TDI is an Equal Opportunity Employer. Employment decisions are made based on individual qualifications, merit, and business needs. We do not discriminate in employment opportunities or practices based on race, color, religion, sex, or national origin, in accordance with applicable federal laws.”
Originally posted on Himalayas