System Engineer (PKI / HSM / KMS)

Quick Facts

• Role: System Engineer (PKI / HSM / KMS)

• Focus: Operating and automating certificate and key management

Description

You will operate, further develop, and monitor Public-Key Infrastructures (PKI), Hardware-Security-Modules (HSM), and Key-Management-Systems (KMS). The role includes building and advancing centralized certificate and key management, with automated certificate/key provisioning, renewals, and monitoring. You will also perform updates, patches, and security controls and ensure encryption solutions are integrated with IT Security, infrastructure, and application development.

Responsibilities

• Operate, develop, and monitor PKI, KMS, and HSM services

• Build and evolve centralized certificate and key management

• Automate certificate and key provisioning, renewal, and monitoring

• Automate certificate provisioning, monitoring, and renewal

• Perform updates, patches, and security controls

• Manage keys according to internal requirements and standards such as ISO 27001 and BSI IT-Grundschutz

• Integrate encryption solutions with IT Security, infrastructure, and application development

Requirements

• Degree in Computer Science or comparable technical qualification

• Experience operating PKI, HSM, or KMS

• Good knowledge of IT Security and cryptography

• Experience with certificate and key management

• Structured and careful working style

• Knowledge of Identity and Access Management and security standards (e.g., ISO 27001, BSI IT-Grundschutz, FIPS) is desirable

• Ideally, experience with automation tools such as Ansible or PowerShell

Benefits

• 35.5-hour work week

• Company pension plan

• 30 vacation days, plus time off on 24.12. and 31.12.

• Employer-provided payments (vermögenswirksame Leistungen)

• Life working time account

• Subsidies for the Deutschlandjobticket

• Company sports

• Flexible working hours

• Partial home office

• TK JobRad support