PKI Specialist (Public Key Infrastructure)

This role is within the banking industry, focusing on implementing a global mandate related to Client Authentication using TLS public certificates and supporting digital certificate discovery.

• 5+ years of experience in the IT industry with practical experience in the PKI area.
• Knowledge of public vs. private Certificate Authorities (CAs) and their respective trust chains and issuance policies.
• Understanding of TLS, particularly mutual TLS (mTLS), and validation of client certificates.
• Familiarity with operating systems and infrastructure components (networks, certificates, domains, etc).
• Analytical and problem-solving skills, capable of navigating complex technical environments.
• Planning skills to prevent service disruptions.
• Strong communication skills to articulate objectives and content clearly for diverse audiences.
• A collaborative team player attitude.

Nice to have:

• Experience with other cryptographic algorithms and key management systems.

• Driving and implementing the global mandate regarding Client Authentication EKU removal from TLS public certificates.
• Implementation of solutions for inward and outward facing trust.
• Providing communication, support, and training for application teams and other areas of the bank as necessary.
• Discovering various digital certificates within the bank, including analyzing internal and potential external tools for discovery.
• Assessing discovered certificates, including types, non-compliances, and remediation proposals.

• Physical Location: Poland - Gdynia/Gdańsk/Warsaw/Łódź
• Required Language: English