Systems Engineer (senior) Switzerland Zurich Bern Contract/German fluent MUST

Systems Engineer (senior) Switzerland Zurich Bern Contract/German fluent MUST

Public Key Infrastructure, PKI (Microsoft CA, OpenSSL, EJBCA, Venafi) HSMs LDAP, SCEP, OCSP, PowerShell, Python

Main tasks

Design, implementation, and management of the PKI infrastructure, including Certificate Authorities (CAs), Registration Authorities (RAs), and related services.

Management and operation of certificates for internal and external applications, devices, and users.

Development and implementation of security policies, procedures, and best practices for the operation and management of PKI services.

Monitoring and troubleshooting of PKI-related services, including certificate renewal and revocation.

Integration of PKI services with enterprise applications, networks, and security solutions (eg, VPN, SSL/TLS, email signatures).

Implementation and management of Hardware Security Modules (HSMs) for secure key storage.

Collaboration with security, network, and application teams to ensure compliance with security requirements.

Development of automation solutions for certificate management and process optimization.

Creation and maintenance of technical documentation, security policies, and operations manuals.

Training and support of internal teams on PKI-related topics.

Required skills

Completed studies in computer science, information technology, cybersecurity, or a comparable qualification.

Several years of experience in implementing and managing PKI solutions in corporate environments.

In-depth knowledge of encryption technologies, certificate services (SSL/TLS), digital signatures, and key management.

Experience with PKI software solutions (Microsoft CA, OpenSSL, EJBCA, Venafi) and HSMs.

Knowledge of automating PKI processes using PowerShell, Python, or similar Scripting languages.

Strong understanding of network security architectures and authentication protocols (eg, LDAP, SCEP, OCSP).

Good problem-solving skills and analytical thinking.

Teamwork skills, strong communication skills, and the ability to clearly communicate technical concepts.

Candidate ideally needs to be suitable to pass security checks (ideally a resident in CH for minimum 5 years)

Education

Certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Microsoft Certified: Security, Compliance, and Identity Fundamentals, or similar.

Experience managing hybrid environments (on-premises and cloud).

Please apply with your most up to date CV if you are interested