PKI & IAM Engineer

• IT - IT Management
• IT - Software Engineering
• Zürich Grossraum
• Contracting
• Full-time
• Immediately - Undetermined
• PKI, Identity Access Management, System Technology / Infrastructure

Your tasks:

• Operation, further development and lifecycle management of the Microsoft PKI infrastructure (AD CS) as well as ensuring stable and secure certificate operation
• Administration of certificate services, templates, CRLs, policies and associated lifecycle processes
• Planning, integration and operation of external certificate services including SSL/TLS, S/MIME and code-signing certificates as well as automated certificate processes via ACME
• Automation of certificate and identity processes using PowerShell, APIs and suitable automation tools
• Ensuring compliance, security and governance requirements in the PKI environment
• Participation in the planning, implementation and operation of identity and access management solutions
• Support in the definition and implementation of role, authorization and access concepts (RBAC)
• Integration of certificate-based authentication methods such as Windows Hello, client certificates or smart card login into existing IAM processes
• Advising and supporting internal teams in the secure use of certificates, identities and access solutions
• Collaboration in exciting projects related to identity, PKI and security topics

Your profile:

• Several years of experience in the field of PKI engineering and certificate management, especially with Microsoft AD CS
• Practical experience in dealing with ACME as well as external certificate services and certification authorities
• Knowledge in the field of Identity & Access Management, especially role and authorization management as well as identity governance
• Understanding of common IAM concepts such as RBAC, Least Privilege, Privileged Access Management (PAM) as well as provisioning and deprovisioning
• Experience in the integration of PKI-based authentication methods into IAM processes
• Very good knowledge of PowerShell as well as experience in the automation of PKI and identity-related tasks
• Good knowledge of Microsoft SQL Server and SQL-based database environments
• University degree in computer science (HF, FH or university) or comparable qualification
• Analytical and conceptual way of thinking as well as strong technical understanding in the enterprise environment
• Strong communication personality with high team orientation and negotiation skills
• Fluent German as well as very good English skills

Advantageous:

• Certifications in the field of PKI, Microsoft Security or Identity Management
• Experience in the development of web applications with C# / ASP.NET / .NET