Hello,
Job Title: Senior RSA Encryption & PKI Engineer/Architect
Location: Remote
Duration: 50 hours for the architect and 500 hours for the engineer (16 Weeks)
Experience: 10+ Years (Relevant experience in PKI, Encryption & Cryptographic Security)
Position 2: Engineer and Architect
Job Overview
We are looking for an experienced RSA Encryption & PKI Architect to design, implement, and lead enterprise-wide encryption and Public Key Infrastructure (PKI) solutions. The ideal candidate will have strong expertise in RSA encryption technologies, cryptographic key management, certificate lifecycle management, and enterprise security architecture.
The candidate will be responsible for developing secure encryption architectures, managing digital certificates, implementing cryptographic standards, and ensuring the confidentiality, integrity, and availability of enterprise data across on-premises and cloud environments.
Key Responsibilities
- Design and implement enterprise-grade encryption and PKI architecture solutions.
- Provide technical leadership for RSA-based encryption technologies and cryptographic security solutions.
- Architect and manage Public Key Infrastructure (PKI), including Root CA, Intermediate CA, and Issuing CA environments.
- Design and implement encryption solutions for data at rest and data in transit.
- Manage cryptographic keys, including key generation, storage, rotation, distribution, archival, and revocation.
- Implement and manage Hardware Security Modules (HSM) for secure cryptographic key storage and protection.
- Oversee digital certificate lifecycle management, including certificate issuance, renewal, revocation, and automation.
- Develop and implement encryption standards, policies, and security best practices.
- Work with security, infrastructure, cloud, and application teams to integrate encryption and PKI solutions.
- Ensure compliance with industry standards and regulatory requirements.
- Troubleshoot complex encryption, certificate, and PKI-related issues.
- Provide architecture documentation, technical design specifications, and recommendations.
Required Technical Skills
- Strong experience with RSA encryption, cryptography, and enterprise encryption architecture.
- Extensive experience designing and implementing enterprise PKI solutions.
- Strong understanding of Public Key Infrastructure, Certificate Authority (CA), X.509 certificates, and certificate chains.
- Hands-on experience with RSA, AES, TLS/SSL, and public/private key cryptography.
- Experience with Hardware Security Modules (HSM) and cryptographic key management.
- Expertise in certificate lifecycle management and automation.
- Strong understanding of SSL/TLS, digital signatures, code signing, and certificate authentication.
- Experience with enterprise encryption and key management products such as:
- Thales CipherTrust Manager / KeySecure
- Entrust nShield HSM
- Microsoft Active Directory Certificate Services (AD CS)
- Keyfactor
- Venafi
- DigiCert
- RSA cryptographic solutions
- Knowledge of cloud encryption services such as AWS KMS, Azure Key Vault, and cloud-based PKI solutions.
- Strong understanding of cryptographic standards, security controls, and compliance requirements.
Preferred Qualifications
- Experience leading enterprise cryptography and PKI transformation initiatives.
- Experience with certificate discovery, automation, and centralized certificate management.
- Knowledge of FIPS 140-2 / FIPS 140-3, NIST cryptographic guidelines, and PKCS standards.
- Experience integrating PKI with IAM, Active Directory, cloud platforms, and enterprise applications.
- Strong communication, stakeholder management, and architecture documentation skills.
