Engineer (IdM/PKI)

Job Description

Spektrum is seeking an Engineer to support key client projects for the NATO Communication and Information Agency (NCIA) in Mons, Belgium. This role involves managing the NATO wide NPKI Registration Authorities, PKI infrastructure, and the lifecycle of end-user and device certificates. The Engineer will also be responsible for NPKI Windows Servers, RHEL, and VMware environment management, including system error log verification, and managing NPKI Hardware Security Modules (HSMs) and the Card Management System.Responsibilities include:

• Managing NATO wide NPKI Registration Authorities
• Managing PKI virtualize and hardware infrastructure
• Managing and controlling the lifecycle of end users and devices certificates for all NPKI CA's
• Managing all NPKI Windows Servers, RHEL and VMware environment including systems error log verification
• Managing NPKI Hardware Security Module (HSMs)
• Managing Card Management System
• Responsible for Entrust sub components connected to the NPKI CA especially in context of potential new services testing and integration
• Responsible for the creation of NPKI related guidance and procedures (SOP)
• Responsible for the delivery of 2nd and 3rd level technical support of CIS services to the NPKI customers
• Responsible for the NCIA ITSM ticketing system
• Responsible for certificate creation and Smart Cards enrolment
• Responsible for supporting all NATO exercises and missions
• Supervising the day-to-day operations /management /backup/restore of the PKI systems
• Installation and maintenance of NPKI components
• Certificate Authority components Log analysis, (Trouble shoot the system ALARM/ERRORS and monitor users and interfaces activity)
• Responsible for NPKI system documentation, hardware inventory, software configuration and inventory and regular systems and applications patching
• Be flexible to work outside normal office hours in response to crises, operational requirements
• Performs other duties as may be required.

Requirements:

• Extensive knowledge of modern communication and Internet Protocol (IP) based networking technologies and systems including security aspects.
• 3 years extensive experience with PKI System development, design, management.
• Extensive knowledge of Information security and Cryptography (symmetric and asymmetric encryption, public key infrastructure (PKI) encryption, public key encryption, hash functions, digital signatures, digital certificates).
• Practical experience in Windows Servers, RHEL and VMware system administration.
• Knowledge of the principles of computer and communications security, networking, and vulnerabilities of modern operating systems and applications.
• Experience with SQL database administration.
• Extensive experience in operating systems backup and restore.
• Practical experience in scripting (Python, Powershell).
• Practical experience in SSL, TLS, and OpenSSL.
• Extensive knowledge with Microsoft Excel.

Spektrum offers:

• On-Site Support on-call duties after normal business hours including weekends and holidays
• Remote work if required
• Work from alternate location to support NPKI customers when required
• Travel to other NATO sites may be required