SAP DevOps Engineer f/m/d - PKI Specialist 

Germany, Bavaria 

220240296

What you'll do

Responsibilities:

• Operational experience supporting mission critical systems across multiple geographical locations and infrastructure providers
• Advanced level troubleshooting and support of PKI system issues
• Maintain and support PKI systems within the organization
• Provide PKI consulting services to customers to understand the usage and responsibilities involved with PKI certificates
• Develop and ensures proper PKI algorithms are enforced
• Coordinates technical incident response and remediation activities for PKI environments
• Publishes reports and maintains metrics for PKI systems
• Willingness to own multiple and varied infrastructures
• Willingness to work in different time zones if needed
• Uplifting the design, implementation, and maintenance of the existing PKI and certificate management systems
• Supporting and managing digital certificates for internal and external use
• Developing policies and procedures for certificate management, including issuance, revocation, and renewal
• Responding to level 3 incidents and service requests
• Providing support to internal customers regarding PKI and certificate management
• Conducting risk assessments and vulnerability patching to identify and mitigate potential security threats
• Collaborating with other IT teams, such as network and systems administrators, to ensure seamless integration of PKI and certificate management systems
• Staying up to date with industry trends and emerging technologies related to PKI and certificate management
• Participate in on-call roster to ensure the security and availability of the PKI systems around the clock
• Stay up to date with PKI and related trends and standards in the industry and thrive to keep the enterprise PKI environments up to date

What you bring

• Bachelor's degree or equivalent and 7+ years related experience with enterprise cybersecurity, PKI environments
• CISSP, CISM, SANS, or other related certifications
• Strong Windows and/or Linux Operating system support skills
• Good working knowledge of terminology used in PKI infrastructure (Certificate Authorities, Registration Authority, Certificate trust chains, OCSP and Certificate Revocation Lists)
• Experience with TLS server and client certificate and private keys management
• Experience with using HSMs (Hardware Security Modules)
• Experience with Algorithms, including RSA and AES
• Experience with Enterprise-wide Key and Secret Management
• Experience with supporting PKI systems that span multiple geographic regions and infrastructure providers
• Experience in working with hashing functions, including SHA-2/SHA-3
• Fluent with the following protocols: TCP/IP, SSL, TLS, SCP and HTTPS. Understand Lightweight Directory Access Protocol (LDAP) and how it is used
• Ability to work in a global, agile and fast-paced development environment
• Mastering of system integration using Webservice APIs (SOAP/Rest)
• General understanding of cryptographic concepts: symmetric/asymmetric cryptography, secure hash, digital signatures, ACME protocol
• Understanding of REST/SOAP API, bash etc.
• Exposure on popular CA solutions like Microsoft ADCS, AWS, Private CA, EJBCA and cloud PKI is a plus
• Intuitive troubleshooting skills and a knack to work also with new/unknown environments and still find a way around them
• Scripting (PowerShell\Shell\Python) and DevOps skills
• Strong Documentation Skills and ability to write security concept documents for PKI solutions
• Excellent written and oral communication skills
• Effective and efficient time management skills

Job Segment:ERP, Cloud, Consulting, Cyber Security, Database, Technology, Security