Certificates Security Engineer

The role involves driving and implementing a global industry mandate at Nordea Bank related to Client Authentication EKU removal from TLS public certificates and supporting discovery of digital certificates within the bank.

• 5+ years of IT industry experience with practical experience in PKI.
• Knowledge of public vs. private Certificate Authorities, including trust chains, root certificates, and issuance policies.
• Understanding of TLS handshake, especially mutual TLS (mTLS) and client certificate validation.
• Understanding of operating systems and infrastructure components such as networks, certificates, and domains.
• Analytical and problem-solving skills to navigate complex technical environments, organizational dynamics, and regulatory requirements.
• Planning skills to prevent service disruptions.
• Ability to assess and propose mitigations for risks.
• Skills in assessing technical solutions and data file analysis.
• Strong communication skills to clearly formulate objectives and content verbally and in writing for diverse audiences including application contacts, technical teams, and management.
• Strong team player with a "I can solve it" attitude.

Nice to have:

• Knowledge of other cryptographic algorithms, key types, and key management systems.

• Drive and implement the global industry mandate regarding Client Authentication EKU removal from TLS public certificates.
• Implement solutions for inward and outward facing trust.
• Provide communication, support, and training for application teams and other bank areas as necessary.
• Discover various digital certificates in the bank by analyzing internal and external tools.
• Analyze discovered certificates for types, non-compliances, and propose remediations.