Description

Bleu PKI And HSM Operational Engineer

Bleu is a French independent cloud services company, founded by Capgemini and Orange. Our proposition: offer the Microsoft 365 collaboration and productivity suite, as well as Microsoft Azure services, in a secure French cloud with a view to obtaining the Sec Num Cloud  3.2 qualification from the ANSSI.

Joining Bleu means being at the heart of the development of an unprecedented cloud model, at the cutting edge of technology, and contributing to the transformation of the French digital landscape in full mutation.

You will evolve in a dynamic and innovative ecosystem, in close proximity to multidisciplinary teams to develop skills and solid experience in a promising field.

You will join a company that cares about the success and personal fulfillment of each individual and is concerned about its environmental, economic, and social impact.

The benefits:

Attractive conditions

Excellent complementary health insurance

Life insurance

Restaurant vouchers

Sustainable mobility pass

...

As an Operational PKI and HSM Engineer, your missions will be:

• Design, operate, and evolve the organization's PKI architecture (root CA, subordinate CAs, and associated services).
• Ensure the availability, security, and longevity of PKI services.
• Manage the lifecycle of certificates and the secure handling of cryptographic keys.
• Define, apply, and maintain certification and security policies (CP, CPS, associated procedures).
• Ensure regulatory compliance, traceability of operations, and preparation for audits.
• Maintain continuity and disaster recovery arrangements for PKI services.
• Conduct and support key ceremonies.
• Produce and maintain reference and operational documentation.
• Contribute to the continuous improvement of PKI processes and practices.
• Raise awareness, train, and support internal teams on PKI usage and best practices.

• You have a Bac +5 degree in cybersecurity, systems and networks, or equivalent.
• You want to put your expertise at the service of critical environments with high security stakes.
• You have between 3 and 5 years of experience as a PKI engineer, security engineer, or security systems administrator.
• You are familiar with PKI infrastructures and key standards (X.509, certificates, CRL, OCSP, CP/CPS).
• You are proficient with Microsoft environments (ADCS, Active Directory) and HSM solutions.
• You have solid knowledge of cryptography, security protocols (TLS/SSL), and strong authentication.
• You have experience in operating, monitoring, and securing critical infrastructures (MCO/MCS).
• You understand the issues related to public certificates, DNS, and third-party certification authorities.
• You demonstrate rigor in key management, documentation, and audits. You are autonomous, reliable, and have excellent interpersonal skills. You enjoy sharing your knowledge and supporting teams.
• You analyze incidents in a structured manner (RCA).
• You have a good level of English to operate in an international context.

We value diversity and inclusion. Each application is reviewed fairly and without discrimination.