Trust Requirements Engineer

As a Trust Requirements Engineer, you play a critical role in ensuring compliance with global trust and certificate standards. You analyze evolving regulatory frameworks and translate them into actionable requirements that guide product development, certificate issuance practices, and compliance operations.

Swiss Sign is a recognised Swiss Trust Service Provider (TSP). We build the foundation for secure digital business based on robust certificate services and advanced digital trust services across multiple regulatory frameworks.

Our certificate services provide a fully Swiss made public key infrastructure for digital certificates, ensuring secure communication, data protection and compliance throughout the entire certificate lifecycle. Complementing this, our digital trust services enable legally compliant digital signatures, seals and timestamps, supporting end to end digital business processes based on verifiable, reusable credentials.

• Conduct in-depth compliance analysis of certificate issuance practices against industry standards, including:
• Extended Validation (EV) Guidelines
• S/MIME Baseline Requirements
• Relevant RFCs, IETF, and ISO frameworks
• Develop and maintain clear, structured compliance requirements specifications for internal stakeholders.
• Collaborate cross-functionally with Product, Engineering, and Information Security & Compliance (ISC) teams to embed regulatory requirements into the software development lifecycle
• Act as a Subject Matter Expert (SME) on:
• Public Key Infrastructure (PKI)
• Certificate profiles and life cycles
• Cryptographic algorithms
• Trust store requirements
• Drafting ballots and proposals
• Participating in technical discussions
• Driving alignment with industry peers
• Assess proposed changes to standards and regulations, translating them into practical guidance for engineering and operations teams
• Monitor emerging trends and regulatory developments, including:
• Certificate lifecycle changes
• Automation protocols such as ACME
• Root Store Policies
• Support audit readiness by preparing materials and walkthroughs in collaboration with ISC and engineering teams
• Contribute to root cause analysis and remediation efforts related to compliance incidents

• 2+ years of experience in PKI, digital certificates, or a related domain
• Strong understanding of:
• X.509 certificate standards
• RFC 5280
• Ability to analyze complex technical and policy documents and convert them into clear compliance requirements
• Hands-on experience with:
• Certificate tools like ASN.
  1
• PKI troubleshooting and analysis methods
• Excellent written and verbal communication skills in English
• Any additional languages are an advantage

• Experience participating in standards bodies or working groups
• Familiarity with audit frameworks (e.g., Web Trust, ETSI)
• Exposure to secure software development practices
• Knowledge of modern cryptographic trends (e.g., PQC)