PKI & Hardware Security (HSM) Specialist (w/m/d)
indivHR | We ๐ IT Recruiting ยท BE, DE
13 days agoImpress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this PKI & Hardware Security (HSM) Specialist (w/m/d) role.
Rezi rewrites your resume against indivHR | We ๐ IT Recruiting's job description. Free.

Tailor your resume to this PKI & Hardware Security (HSM) Specialist (w/m/d) role.
Rezi rewrites your resume against indivHR | We ๐ IT Recruiting's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the PKI & Hardware Security (HSM) Specialist (w/m/d) posting at indivHR | We ๐ IT Recruiting โ free, in seconds.

Don't guess if your resume is good enough.
See how it scores against the PKI & Hardware Security (HSM) Specialist (w/m/d) posting at indivHR | We ๐ IT Recruiting โ free, in seconds.
About the Role
The PKI & Cryptography department develops and operates cryptographic infrastructures for demanding customer environments. The focus is on public key infrastructures, hardware security modules, and secure, automated certificate and key processes in network, cloud, and application landscapes. We are looking for a specialist to further expand our team.
Responsibilities
- Recording and analyzing existing PKI and cryptography environments, including gap and risk analyses.
- Designing, operating, and further developing public key infrastructures, certificate authorities, and trust stores.
- Distributing and managing X.509 certificates and checking their status via Certificate Revocation Lists and OCSP.
- Operating and integrating Hardware Security Modules, including key generation, key protection, backup, and recovery.
- Automating Certificate Lifecycle Management and integrating it into network, cloud, and application landscapes.
- Supporting, managing, and documenting involved certificate processes.
- Creating security concepts, operating documentation, and technical guidelines.
- Assisting with audits and the implementation of ISO 27001 and BSI IT-Grundschutz.
- Coordinating with customers and adjacent departments, and presenting technical solution approaches.
Requirements
- At least three years of professional experience in cyber security or infrastructure environments.
- Practical experience with PKI, X.509, certificate chains, certificate authorities, and certificate lifecycle management.
- Hands-on experience with Hardware Security Modules and secure key management.
- Knowledge of cryptography, TLS, mTLS, smart cards, or digital signatures.
- Experience with the automation of certificate processes and with APIs, PowerShell, Python, or comparable tools.
- Understanding of high availability, backup and recovery, and secure operating processes.
- Good customer approach, communication, and presentation skills.
- German language skills from B2 level and good English language skills.
- Willingness to travel for projects and undergo security checks.
- Structured, independent, and solution-oriented way of working.
Skills
- PKI
- X.509
- Certificate Chains
- Certificate Authorities
- Certificate Lifecycle Management
- Hardware Security Modules (HSM)
- Key Management
- Cryptography
- TLS
- mTLS
- Smartcards
- Digital Signatures
- Automation
- APIs
- PowerShell
- Python
- High Availability
- Backup and Recovery
- Secure Operating Processes
- Customer Approach
- Communication
- Presentation Skills
- ISO 27001
- BSI IT-Grundschutz
- Common Criteria
- eIDAS
- Thales Luna
- Entrust nShield
- Utimaco
- Microsoft AD CS
- Entrust
- EJBCA
- Keyfactor
- Venafi
- DigiCert
- Critical Infrastructures
- Government Sector
- Banking
- Automotive Industry
- CISSP
- CISM
- CCSP
Location
- Germany-wide
Work Type
- Hybrid
- Full-time
Experience Level
- Minimum three years of professional experience
Benefits
- Individual further training and certification opportunities
- Attractive salary package
- Long-term development prospects
About the Company
- An internationally active IT service and consulting company that supports companies and public clients in secure digital transformation.