L3 Engineer Enterprise PKI Solutions

Leading Offshore IT & Software Development Outsourcing Company offers various services like software consulting, application development, etc.

• Communicating and coordinating with internal technical teams
• Obtaining and reviewing supporting documentation
• Performing assessments (where necessary) and publishing reports
• Summarizing the adequacy of security controls
• Outlining gaps & remediation steps to develop practical recommendations
• Evaluating internal compliance to regulations such as SOX, PCI, HIPPA & SSAE 16
• Capturing assessment results in centralized repository
• Document new processes and workflows while maintaining / improving on existing processes and workflows
• Effectively lead & manage multiple projects without a great deal of direction or oversight
• Interact with team members and department/division personnel in a professional and mature manner
• Coordinate enterprise information security risk assessments
• Catalog, track and report the status of risk assessments and resolution actions
• Propose risk mitigations based on cost, benefit and risk
• Keep abreast of current developments and emerging issues and risks both within the technology organization and the information technology industry, and apply gained knowledge to risk assessments

• Should have thorough understanding about cryptographic solutions being used in IT industry
• Should have thorough understanding about cryptographic concepts such as encryption algorithms, hashing algorithms, digital signatures, nonrepudiation, certificate authority, and related technologies
• Should have deep knowledge and hands‑on experience in designing, implementing and managing cryptography based solutions such as Public Key Infrastructure (MUST), file integrity solutions, HSM’s for secured storage of keys
• Should have thorough understanding about PKI components such as Root CA, Intermediate or Subordinate CA, Issuing CA, Policy CA, CRL, and relevant protocols such as OCSP, SCEP
• Should have experience integrating PKI solutions with applications/solutions based on standard protocols such as SSL/TLS - Client/Server authentication/session encryption, SMIME
• Should have conceptual level understanding of network technologies - basic routing and switching
• Should have good understanding about PCI DSS/HIPPA/DPA and other leading compliance requirements
• Should understand customer’s requirements & transform them into technical controls or solutions
• Should understand product licensing/bill‑of‑material/part codes

• Managing several GRC related tasks simultaneously without a great deal of direction or oversight
• Interacting with team members and department/division personnel on other GRC related tasks
• Managing audits and coordinating with external auditors
• Design, implement and manage Enterprise PKI solutions
• Prepare Technical Solution Design Documents and Project Plans
• Work with Customer’s Architecture team to finalize the solution deployment design
• Validate Bill of Material/Bill of Quantity against deliverables
• Document high‑light key risks/issues, mitigation steps, and dependencies on customer/other teams
• Work with Program Manager for timely updates/tracking of deliverables
• Ensure that project implementation is completed within defined timelines
• Manage resources assigned to project effectively
• If any delays, prepare gap‑analysis and raise alarms in project review meetings – internal/external
• Managing various sign‑offs/milestone achievement records, sharing with Sales Account Manager/Finance guys for billing/invoicing