PKI Engineer

Zetes is an international company headquartered in Belgium, specialised in identity solutions for national governments. 

Zetes was established in 1984 and has subsidiaries in most European countries. Since 2017, we have been part of the Panasonic Group.

http://www.zetes.com/en

https://peopleid.zetes.com/en

The PKI admin team is based in both Tallinn and Brussels. Our internal working language and documentation language is English.

This year Zetes signed a contract with the Police and Border Guard Board (PPA) for the PKI for the next generation Estonian eID cards. 

Zetes will provide certification services and a qualified trust service that enables  individuals to verify their identity in an electronic environment and provide a digital signature.

The estimated contract value is 26 million euros.

As PKI Engineer you will engage in both the intellectual and the hands-on aspects of the PKI systems that form the foundation of these electronic identity schemes.

As a member of the PKI team, you will play a crucial role in maintaining and enhancing the Estonian eID ecosystem by:

• Designing the PKI architecture and defining the roadmap for PKI components
• Establishing key management and certificate management policies
• Co-authoring certification practice statements, certificate policies, and timestamp policies
• Conducting key ceremonies, deploying systems, and overseeing daily operations and monitoring

You are expected to participate periodically in a standby regime. While on standby, you will be either first or second in line to handle incidents.

If an incident cannot be resolved remotely, you will need to go on-site. Standby periods and interventions are compensated.

What we expect from you:

• A Bachelor’s or Master’s degree in ICT, or equivalent through experience
• Practical experience with PKI procedures and products
• Experience in Security Management is a plus
• Experience with a combination of the following:
  • Public Key Infrastructure (Internal and Internet)
  • X.509 Digital Certificate Management
  • Hardware Security Modules
• Experience with scripting languages, i.e. Shell Script, Python, Perl, Powershell, Bash
• Some administrative experience with Linux or Windows

You should be able to:

• Handle complex information
• Describe ICT environments, write functional descriptions, procedures, reports, etc.
• Work in a fast-paced, high-productivity and rapidly changing environment
• Act as a subject matter expert and transfer knowledge to others
• Work independently

Great if you have:

• Good analytical and diagnostic skills
• Attention to detail
• A driving license
• Estonian language skills

The responsibilities of the team: 

PKI management

• Selecting and evaluating PKI products
• Experimenting with PKI configurations and certificate profiles
• Defining PKI management processes and procedures
• Administering daily PKI infrastructure operations, including CA, VA, HSM, backup media, and timestamping infrastructure

You will:

• Perform specialized tasks such as manual certificate enrollment and revocation
• Define and document CA hierarchy, PKI architecture, and configurations
• Outline lifecycles for managed objects such as certificates, keys, CRLs, etc.
• Support certificate services projects and operations
• Prepare and document configuration scripts
• Install, configure, and maintain the operational environment
• Set up PKI application software
• Maintain a test environment and validate all critical procedures related to system maintenance and documentation

You will:

• Troubleshoot and solve problems
• Maintain the integrity and security of servers and HSMs
• Maintain system documentation
• Keep equipment inventories up-to-date
• Evaluate new equipment and techniques
• Monitor PKI-related Key Performance Indicators, analyze and report incidents
• Define and implement (or assist with implementing) monitoring tools for public services' performance and availability (e.g., CRL publication, website, OCSP responder, certificate and revocation request handling)
• Stay current with technology trends, recommend hardware and software purchases
• Perform preventive maintenance and tests on PKI equipment following manufacturer's instructions  
• Troubleshoot malfunctions
• Arrange repairs when necessary
• Coordinate installations
• Implement backup and recovery solutions

Integration and deployment

You will:

• Deploy core PKI software components and HSMs in close collaboration with the system administration team
• Define and describe interfaces and protocols for integrating core PKI components with external systems for card personalization, management, and certificate management
• Create customized tools, software, or scripts for highly specialized PKI-specific tasks
• Coordinate the installation and maintenance of PKI systems

Zetes offers you a unique and challenging position in a high-tech setting focused on cybersecurity and PKI. You'll work in a team that brings together various state-of-the-art technologies and skills. 

Together with specialists and developers from Belgium and Estonia, you will create and later manage a new PKI environment for the Estonian eID card from the ground up. 

You'll be involved in most aspects of creating and certifying this new PKI service.

After the Estonian project goes live, you'll participate in our PKI projects worldwide. You'll work in an engaging environment with a diverse team of professionals in a flat organization.

You'll have:

• The opportunity to learn new skills through hands-on experience

• Access to in-house and external training (PKI technology, Linux qualifications, ITIL certification, cybersecurity certification, language training, etc.)

• The possibility to undertake longer training programs, postgraduate studies, or even acquire a Master's degree related to the field

• A competitive remuneration package