Tech Lead (Certificate Lifecycle Management)

Position Details:

Title: Tech Lead (Certificate Lifecycle Management)

Duration: 1-year (possible renewal)

Hours: 37.5 hours

Hybrid: 1 day mandatory on-site (Tuesday) + 1 day Friday mandatory once a month -5X/month onsite

Compensation: $75-$80/Hour

Interview Process: 2 rounds

• 1st Round virtual


• 2nd Round in-person

Day-to-Day:

• Work with Director to take on foundational work, along with a Tech Lead already on team.


• Integration work with other critical services at the bank


• Design, implement, integrate


• Work with CyberArk vendors to design, build, configure and deploy Digital Certificate Lifecycle Manager (DCLM) from DEV, UAT to PROD using CyberArk Certificate Manager SaaS


• Collaborate with Certificate operational team and other technology partners to integrate DCLM with DigiCert One and Sectigo CAs


• Work with other technology partners to design and integrate DCLM with critical enterprise services (e.g., GitHub, Ansible) to enable automated certificate renewals and deployment


• Provide production support, and work with AO partners on problem troubleshooting/solving


• Follow Agile methodology to setup environment, configure, test, debug, and document in order to ensure successful implementation and maintenance of the service during/post project

Must-haves:

• Must come from an enterprise background/level


• Excellent communication


• Experience designing and building enterprise security services, specifically highly available services


• Strong knowledge (8+ years) of digital certificate management and PKI space or experience design and build an enterprise security tool/service (e.g., CyberArk, HashiCorp, F5, Palo Alto) for a corporate environment


• Strong knowledge of Linux OS, Python or Shell scripting (ideally Python)


• Hands on experience with Ansible playbooks


• Hands on experiences with ServiceNow for change management and intake estimation in an corporate environment (e.g., banking)


• Deep understanding of high available system design and strong focus on operational excellence.


• Have knowledge/experience of DevOps Toolsets: GitHub, GitHub Actions/Jenkins and Artifactory

Nice-to-Haves:

• Cryptographic background as its niche


• CyberArk (they were acquired by Venafi, now by Palo Alto)- will be hard to find because of its name or vendor could be different