PKI IT Security Engineer

GROUP BNP PARIBAS BNP Paribas Group is the top bank in the European Union and a major international banking establishment. It has close to 185,000 employees in 65 countries. In Spain we are more than 5,100 employees within 13 business lines.Spain IT Production Spain IT Production organization consists of CIB ITO & ITG IT Platforms and is responsible for providing IT Production services to our Clients in EMEA, ensuring a Digital Market evolution, in a secured and performant environment, and with a reliable quality. IT Production organisation includes Infrastructure services, Telecom & Workspace, Production Security and Application Production domains and associated transversal services (CTO Office, Control Tower, PMO and IT Continuity). In Spain, IT Production relies on a Platform with over 400 experts that provide full-stack support services ensuring a secure, stable, standardized, and efficient production.ABOUT THE JOBMISSION Context BNP Paribas is a major player in the European banking sector. As such, BNP Paribas must protect its assets from cyber-attacks. The bank is also subject to strong rules from regulators or its customers. The major challenges of current computing require greater security of data and banking applications. In a growing context of developing mobility solutions and Cloud services adoption, the mission is to integrate the Production Security teams in charge of setting up services to secure access to information system assets.The mission is part of the IT Group Production Security – Defense teams. This team is specialized in security and data protection issues. The primary responsibility of the teams is to provide security services within the overall requirements framework while ensuring the operational readiness and Level 3 support of these services within an international scope.Scope: Key Management Services (KMS), Hardware Security Modules (HSM), Encryption, PKI, cryptographic services, smart cards, strong authentication solutions, electronic signature, etc.Mission & Role summary Within the PKI expertise team, the mission will be to ensure the maintenance of the Group’s PKI infrastructure in operational condition and to participate in the evolution of digital trust services (PKI, strong authentication solutions, encryption solutions).It is expected that you operate in a cloud context (Office 365, IBM and others) to meet new uses and security needs (authentication, encryption, signature). In this context, you will contribute to the study, qualification and subsequent implementation of new security solutions. A technical background, security and project management is therefore needed.You will contribute to the on-call duty rotation provided to ensure the high availability of services provided by the PKI expertise team.RESPONSIBILITIES As part of this job, your missions will be to:Technical Essentials Technical expertise on PKI infrastructure (PKI, CMS, MPS, AEP, OCSP, certificate enrolment protocols, etc.), Participate in PKI-based authentication, encryption and signature projects, Technical qualifications of new solutions and versions of existing solutions, Guidance and support for the business lines on the safety aspects of various projects, Drafting of procedures, documentation and functional and technical presentations in English and French, Study, qualification and implementation of new safety solutions, Contribute to the study of innovative solutions around strong authentication or life cycle management of certificates, Perform a security technology watch (authentication means, cryptographic algorithms, vulnerabilities, etc.),Maintenance in operational and security condition: Carry out on-call duty (one week per month), Provide level 2 and 3 support to the PKI infrastructure, Analyses and processes engineering requests and incident tickets, Carry out operations in unworked hours, Maintenance and development of PKI infrastructure, Industrialise and automate operating processes.REQUIREMENTSStudies Master’s degree or equivalentExperience Minimum 2-to-4-year experience with HSM, CKMS, PKI Experience in IT Production environments Experience as SPOC for technical escalationsLanguages High Level of English (written / spoken). French speaking will be appreciated.SKILLSTechnicalPKI Solutions - Expert Cryptography - Expert Security - Expert Infrastructure - Mastery Architecture - Mastery Programming Languages (Shell, Python, etc.) - Mastery Production - Expert OS UNIX / Windows - Mastery Base de données (Postgres, MongoDB…) - Pratique Active Directory - Mastery Administration - Mastery IAM - Mastery Network - MasteryBENEFITS • Training programs, career plans and internal mobility opportunities, national and international thanks to our presence in different countries. • Diversity and Inclusion Committee that ensures an inclusive work environment. In recent years, several employee communities have been created to organize diversity and inclusion awareness actions (PRIDE, We Generations and MixCity). • Corporate volunteering program (1 Million Hours 2 Help) in which employees can dedicate time out of their working hours to volunteer activities. • Flexible compensation plan. • Hybrid telecommuting model (50%). • 32 vacation days.Diversity and inclusion commitment BNP Paribas Group in Spain is an equal opportunity employer and proud to provide equal employment opportunity to all job seekers. We are actively committed to ensuring that no individual is discriminated against on the grounds of age, disability, gender reassignment, marriage or civil partnership status, pregnancy and maternity/paternity, race, religion or belief, sex or sexual orientation. Equity and diversity are at the core of our recruitment policy because we believe that they foster creativity and efficiency, which in turn increase performance and productivity. We strive to reflect the society we live in, while keeping with the image of our clients.