Certification Authority (CA) Engineer

Generate and manage all Certification Authorities (Root CA, Sub-Root CA) and sign certificate key requests.

Plan, execute, and document offline key ceremonies in compliance with security best practices.

Configure and test cryptographic hardware (HSMs / CSUs) and maintain secure inventories.

Develop disaster recovery strategies for CA and cryptographic systems.

Maintain CA lifecycle, including retirement of outdated authorities.

Draft and maintain PKI policies, procedures, and audit documentation.

Perform quarterly audits and ensure compliance with industry standards.

Manage PINs, backups, and key custody for cryptographic devices.

Qualifications

Strong technical background in Public Key Infrastructure (PKI), Certification Authority operations, and cryptographic hardware.

Experience with key ceremony management, HSM configuration, and secure process documentation.

Knowledge of industry compliance standards (e.g., WebTrust, eIDAS, ISO 27001) is an advantage.

Detail-oriented with excellent organizational and audit skills.

#J-18808-Ljbffr