PKI / Certificate Management Specialist

• 5+ years of experience in IT industry with practical experience in PKI area.
• Knowledge of public vs. private CA: understanding the differences between trust chains, root certificates, and issuance policies for public (CA/B Forum regulated) vs. internal (Private PKI) Certificate Authorities.
• Understanding of TLS: knowledge of the TLS handshake, particularly mutual TLS (mTLS) and how client certificates are validated.
• Understanding of OS and infrastructure components (networks, certificates, domains, etc).
• Analytical and problem-solving skills with ability to navigate complex technical environments, organizational dynamics, and regulatory requirements.
• Planning skills to prevent service disruptions.
• Assessing and proposing mitigations for risks.
• Skills for assessing the technical solutions, data files analysis.
• Ability to clearly formulate objectives and content, both verbally and in writing/presentations, for versatile Nordea audience involved: applications contacts, other technical teams, as well as the management.
• Strong team player with "I can solve it" attitude.

Nice to have:

• Other cryptographic algorithms, key types and the systems for their key management.

• Driving and implementing in Bank the global industry mandate with respect to Client Authentication EKU removal from TLS public certificates.
• Implementation of solutions for inward and outward facing trust.
• Communication, support, and trainings for application teams and bank’s other areas as necessary.
• Discovery of various digital certificates in Bank.
• Analysis of tools - both internal, currently used in Bank, as well as external, which could be used for discovery.
• Analysis of discovered certificates (types, non-compliances, remediations proposal).