System Engineer (PKI/HSM/KMS)

Quick Facts

• Role: System Engineer focused on PKI/HSM/KMS and central certificate & key management

• Focus: Operation, development, monitoring, and automation of encryption/key services

Description

You will operate, further develop, and monitor Public-Key Infrastructures (PKI), Hardware-Security-Modules (HSM), and Key-Management-Systems (KMS), including the central certificate and key management. You will automate certificate and key provisioning, renewal, monitoring, and perform updates, patches, and security controls. You will also manage keys according to internal requirements and standards such as ISO 27001 and BSI IT-Grundschutz, ensuring secure integration with IT security, infrastructure, and application development.

Responsibilities

• Operate, further develop, and monitor PKI, KMS, and HSM services

• Build and develop central certificate and key management

• Automate certificate and key provisioning, renewal, and monitoring

• Automate certificate provisioning, monitoring, and renewal

• Perform updates, patches, and security controls

• Manage keys according to internal requirements and standards such as ISO 27001 and BSI IT-Grundschutz

• Integrate encryption solutions securely with IT security, infrastructure, and application development

Requirements

• Completed degree in Computer Science or comparable technical qualification

• Experience operating PKI, HSM, or KMS

• Good knowledge of IT security and cryptography

• Experience with certificate and key management

• Structured and careful working style

• Knowledge of Identity and Access Management and common security standards (ISO 27001, BSI IT-Grundschutz, FIPS) (desirable)

• Ideally experience with automation tools like Ansible or PowerShell

Benefits

• Flexible working hours with options for partial remote work

• 35.5-hour work week

• 30 days vacation plus additional time off on 24.12. and 31.12.

• Company pension plan

• Company benefits such as capital-forming benefits (vermögenswirksame Leistungen) and life-work time account

• Subsidies for the Deutschlandticket job ticket and Jobrad

• Company sports (Betriebssport)