Security Pki Pma Delivery

**Location**:
Brussels, Belgium

**Security Clearance**:
EU Secret

**Introduction**:
From being part of a dynamic, global Security Design & Operations team to learning about new security technologies, this is a role where you can make a difference. As one of our Cryptographic Security personnel, you’ll translate customer requirements into the Creation, Design, Establishment and Operation of a PMA (PKI Management Authority) whilst remaining sensitive to cost, strategy and risk drivers.

**Skills, knowledge, experience required**:

- A proven track record of delivering Identity Management and PKI solutions, across a global team;
- Experience of establishing PKI Frameworks, such as a PKI Management Authority (PMA);
- To possess understanding of the lifecycle of a Certificate;
- Ability to effectively communicate and influence at all levels of the organisation, “C-suite”, CISO, Audit & Compliance, and Operations;
- To take ownership for compliance with the Information Security ruled for the company and the specific project to which they are allocated;
- Previous experience of working with customers who have higher levels of physical and logical security standards and controls;
- Ability to use own initiative and be comfortable working with changing requirements;
- Self-motivated and proactive individual, comfortable at challenging and working to stringent deadlines.

**Desirable**:

- Specific Nexus PKI and ATOS HSM knowledge, or being capable of obtaining it;
**Duties/role**:

- Establishing a Public Key Infrastructure (PKI) Management Authority (PMA), after identifying all the stakeholders impacted by the PKI services to be deployed;
- Establishing the PMA council and high-level scope and functional outputs of the PMA;
- Positioning the PMA role within a wider compliance capability;
- Co-ordinating with the “customer” and Stakeholder Organisations, steering conclusions in the direction of the recommendations;
- Establishing a RACI (Responsible, Accountable, Consulted, and Informed) document of possible PMA organisation representatives;
- Creating an initial Public Key Infrastructure (PKI) Policy Management Authority Charter;
- Creating the “Trust Model” document, for each PKI, capturing the customer’s current and future PKI model and requirements;
- Certificating profile information for all Root, Intermediate, Issuing and End Entity certificates;
- Generating a naming document for each Root CA, Intermediate CA, Issuing CA, and End Entity certificate described within the “Trust Model” document;
- Setting up and agreeing with the customer a Key Ceremony process based on the “Trust Model”;
- Establishing an agreeing with the customer standards based Certificate Policy (CP) per PKI;
- Creating a Certificate Practice Statement (CPS) describing the procedures and practices that it employs when managing certificates (issuing, revoking, renewing, and rekeying);
- Designing and providing a per Certification Authorities (CA) Self-Assessment framework;
- Obtaining signoff of deliverables from the Customers Technical specialists;
- Assessing and reviewing each of the CAs against the established assessment framework, annually with the customer. Scheduling remediation with the appropriate teams;
- Establishing an agenda of monthly, and annual deliverables for the PMA, ensuring the bi-directional engagement with associated teams;
- Guiding and coaching Delivery and Operational Teams during the implementation of the Solution;
- Bringing to resolution to cross tower technical issues, where the PKI and PMA are adjacent to additional both Identity Management, Security and audit and compliance controls.

VECTOR SYNERGY sp. z o.o., ul. Marcelińska 90, 60-324 Poznań, NIP PL7811857270, REGON 301575740, KRS: 0000369575

Rejestr Przedsiębiorców KRS prowadzony przez Sąd Rejonowy Poznań - Nowe Miasto i Wilda w Poznaniu, VIII Wydział Gospodarczy KRS,