Java Backend (Cybersecurity) - Assistant Vice President

Discover your future at Citi

Working at Citi is far more than just a job. A career with us means joining a team of more than 230,000 dedicated people from around the globe. At Citi, you’ll have the opportunity to grow your career, give back to your community and make a real impact.

Job Overview

he purpose of thisroleis to design,developand engineer Cryptographic,PKIand Certificate managementSystems alongside existingengineeringteam members fulfilling corporate requirements,policiesand standards.

The candidate will take part in definingcryptographic standards, architectures, and governance,and helpdevelopCiti’s nextgeneration crypto ecosystem, alarge scaleenterprise security solutions usingthe latestadvancements in cryptography and information securityandadvanced algorithms.

Certificate managementengineering, focused onautomated certificate management, deployment, renewal in various clients, applications operating systems;cryptographic protocolsand controls, including but not limited to, post-quantum cryptography, PKI solutions, and strategic vendor interaction.

Thecandidate’s responsibilitieswill also includeworking with advanced mathematical algorithmswithinPKI.Theengineerwill participant indevice and usercertificatemanagementfocusing oncertificatelifecycleautomationprojects in Citi, includingcertificate automation for microservices, desktops, servers, Windows/Unix hosts,network securitydevicesand otherappliances.

Responsibilities:

The candidate's primary responsibility will be todesign and introduce enterprise level certificate automation processes and solutions,which will include working on PKI architecturesas well.

The candidate must have experience with PKI andagoodunderstanding of cryptography, includingthe principles related to PKI, private keys, encryption methods, CRL, and advanced key usages.

Work with all disciplines, engineers, and operational product owners to integrate PKI and certificate management related technologies with Citi platforms to protect and manage the cryptography of mission critical systems.

Perform product evaluation, testing and certification of PKI and Crypto technologies. Ensure that all security products meet or exceed Citi internal and regulatory requirements.

Provide occasional 4th level support for the product toolset.

Produce documentation of processes and procedures for the usage of the product.

Follow the Technology Development Life Cycle in the development of all security tools.

Qualifications:

Strong solid experience in cryptography,crypto protocols/algorithmsand peripheral technologies isrequired.

Must be familiar with information security concepts, bestpracticesandsolutions.

Must have a strongengineerbackground

Database knowledge, preferably MSSQL and scripting background, preferablyPowershellisrequired.

Experience withcommercial Certificate Authority (CA)products and/orcertificate management systemsis a plus.

Understanding of Microsoft Windowsand Unixoperating systems

Sound security engineering principles as background to understanding the inner workings of the systems and controls that form an enterprise security ecosystem

Understanding of symmetric key encryptionand asymmetricencryption

Experience with a variety of HSM platformsis a plus

Working with Trust Providers is a plus.

Education:

Bachelor’s degree/University degree or equivalent experience

Master’s degree preferred

Information Security Certification(s)

-

Job Family Group:

Technology

-

Job Family:

Systems & Engineering

-

Time Type:

Full time

-

Most Relevant Skills

Please see the requirements listed above.

-

Other Relevant Skills

For complementary skills, please see above and/or contact the recruiter.

-