PKI Engineer - Java /Cloud Expert

The purpose of this job is to develop and engineer Cryptography and PKI Systems, support middleware integrations using Java alongside existing team members fulfilling corporate requirements, policies and standards.
Take part in defining cryptographic standards, architectures, and governance, develop large scale enterprise security solutions using advancements in cryptography and information security, work with advanced algorithms.
Cryptographic engineering developer with hands on experience in Java. The engineer will work on emerging technology and exciting area of next generation security ecosystem.
The job will also involve working with advanced mathematical algorithms , cloud experience and is generally known to provide good job satisfaction for the right candidate meeting our Citi and team culture fitness requirements.
The engineer will focus on certificate automation projects in Citi, including certificate automation for microservices, desktops, servers, Windows, Unix hosts, firewalls, appliances and other citi infrastructure and various cloud platforms.
Responsibilities:
The candidate's primary responsibility will be to develop solutions at the enterprise level, which will include working on cryptographic architectures with main focus on automation in the PKI & cryptography engineering space.
The candidate must have a basic understanding of cryptographic concepts and its pillars. Knowledge of principles related to PKI, private keys, encryption methods, CRL, and advanced key usages is good to have.
They must be familiar with information security concepts and products.
They must have strong development background in C# and Python.
A sound knowledge of secure development technologies, object oriented programming and shift left is required.
Work with all disciplines, engineers, and operational product owners to integrate PKI and certificate management related technologies with Citi platforms to protect and manage the cryptography of mission critical systems.
Perform product evaluation, testing and certification of PKI and Crypto technologies. Ensure that all security products meet or exceed Citi internal and regulatory requirements.
Provide occasional 4th level support for the product toolset.
Produce documentation of processes and procedures for the usage of the product.
Follow the Technology Development Life Cycle in the development of all security tools.
Qualifications:
Understanding of Microsoft Windows operating systems
Understanding of Linux
Understanding of cryptographic protocols
Object oriented Programming Experience
Programming in Python
Knowledge of Crypto Libraries (Bouncy Castle)
Sound security engineering principles as background to understanding the inner workings of the systems and controls that form an enterprise security ecosystem
Symmetric Key Encryption
Asymmetric Encryption
Cloud
Education:
Bachelor’s degree/University degree or equivalent experience
Master’s degree preferred
------------------------------------------------------
Job Family Group:
Technology
------------------------------------------------------
Job Family:
Systems & Engineering
------------------------------------------------------
Time Type:
Full time
------------------------------------------------------
Most Relevant Skills
Please see the requirements listed above.
------------------------------------------------------
Other Relevant Skills
For complementary skills, please see above and/or contact the recruiter.
------------------------------------------------------
Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.
If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.
View Citi’s EEO Policy Statement and the Know Your Rights poster.

Work arrangement
Hybrid