PKI Consultant

Quick Facts

• Role: PKI Consultant (m/w/d)

Description

You will consult on and implement PKI solutions, focusing on cryptography, security standards, key generation/storage, and hardening. You will independently process change requests from intake through documentation to implementation, deliver training on the project-specific PKI solution, and further develop the PKI solution (updates, upgrades, replacements). The role requires strong expertise in PKI concepts, X.509, CAs, HSMs, enrollment and validation services, and day-to-day PKI operations.

Responsibilities

• PKI consulting according to the defined scope (BSI guidelines, key generation/storage, cryptography, hardening)
• Independently handle change requests end-to-end (intake → documentation → implementation)
• Run trainings for the project-specific PKI solution
• Develop and maintain the PKI solution per procurement requirements (updates, upgrades, replacement, etc.)

Requirements

• Long-standing professional experience in the security field, specifically in PKI
• Excellent knowledge of cryptography, X.509 certificates, certificate authorities (CAs), and HSMs
• Knowledge of certificate enrollment protocols (SCEP, EST)
• Experience with certificate validation services (OCSP, CRL)
• Experience conceptualizing complex PKI environments
• Experience implementing CA solutions including HSMs
• Knowledge of creating Certificate Policy & Certificate Practice Statement
• Advantage: experience with BSI technical guidelines (TR-02102, TR-03145)
• Advantage: experience with MariaDB Galera clusters
• Knowledge of administration and operation of PKI infrastructures
• Practical experience renewing CA certificates in ongoing operation
• Excellent communication skills in German and English

Benefits

Not specified in the provided posting.