PSCU · 3 hours ago
Certificate Services & Data Encryption Engineer - Remote
Maximize your interview chances
Financial Services
Growth OpportunitiesH1B Sponsor Likely
Insider Connection @PSCU
Get 3x more responses when you reach out via email instead of LinkedIn.
Responsibilities
Manage the full lifecycle of digital certificates, including issuance, renewal, revocation, and decommissioning.
Direct administration and engineering for all dependent cryptographic implementations in support of securing Velera’s sites, communications, data, proprietary code, connections, etc.
Oversee both internal and external certificate authorities (CAs), ensuring compliance with industry standards and organizational policies, utilizing Venafi for certificate management automation, monitoring, and reporting.
Implement monitoring systems to track certificate expiration dates and ensure timely renewals to avoid service interruptions.
Administer an HSM(s) for the secure storage and management of cryptographic keys used in certificate services. This includes ensuring that the HSMs are properly configured, maintained, and integrated with certificate management systems to ensure the integrity, confidentiality, and availability of cryptographic keys.
Manage and oversee at-rest cryptographic data encryption solutions to protect corporate data assets while Collaborating with IT and security teams to align encryption strategies with organizational goals and regulatory requirements.
Utilizing tools such as Netwrix for monitoring, auditing, and reporting, ensure comprehensive visibility and control over the environment to monitor infrastructure data blind spots to mitigate or prevent data loss and corruption.
Align with engineering teams as needed around design, implementation, and support issues involving key stores and/or proper certificate requests, use, renewal, and revocation.
Act as a subject matter expert on PKI, certificate types, use cases, and certificate lifecycle management – remaining updated on the latest developments in encryption technologies and PKI, ensuring the organization's practices remain current and effective.
Qualification
Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.
Required
Bachelor’s degree in computer science, Information Technology, or a related field, or the equivalent combination of demonstrated education and experience in a related information technology required.
7+ years of experience in certificate management, PKI, and data encryption.
5+ years of direct systems and/or network engineering.
Understanding of Kerberos / Microsoft Secure Channel required.
Direct experience with Microsoft Active Directory and ADCS a must.
Experience managing services with a trusted, outside certificate provider required.
Experience working with a trusted certificate issuer like Digicert.
Experience managing certificates via a certificate management platform like Venafi.
Experience utilizing and managing a cryptographic data tokenization platform like CipherTrust.
Experience managing Hardware Security Modules (HSMs) for key protection.
Strong knowledge of PKI, certificate lifecycle management, and typical certificate infrastructure topologies.
Deep understanding of cryptographic technologies, processes, and data encryption technology integration best practices.
Strong communication skills, with the ability to provide clear guidance to technical and non-technical stakeholders.
Preferred
Relevant certifications (e.g., Certified Information Systems Security Professional (CISSP), Certified Encryption Specialist (CES)) are a plus.
Understanding of Linux SSH and SSSD is helpful.
Experience with F5, JKS, IIS, JBoss/JDK, IDP’s/SP’s and their integration with certificate services a plus.
Benefits
Competitive wages
Medical with telemedicine
Dental and Vision
Basic and Optional Life Insurance
Paid Time Off (PTO)
Maternity, Parental, Family Care
Community Volunteer Time Off
12 Paid Holidays
Company Paid Disability Insurance
401k (with employer match)
Health Savings Accounts (HSA) with company provided contributions
Flexible Spending Accounts (FSA)
Supplemental Insurance
Mental Health and Well-being: Employee Assistance Program (EAP)
Tuition Reimbursement
Wellness program
Benefits are subject to generally applicable eligibility, waiting period, contribution, and other requirements and conditions
Company
PSCU
PSCU/Co-op Solutions is the nation’s premier payments credit union service organization (CUSO) and an integrated financial technology solutions provider.
H1B Sponsorship
PSCU has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2023 (6)
2022 (10)
2021 (3)
2020 (2)
Funding
Current Stage
Late StageCompany data provided by crunchbase