Senior PKI Engineer

Job Description

Are you ready to make an impact at DTCC?

Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We're committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.

Pay and Benefits:

• Competitive compensation, including base pay and annual incentive
• Comprehensive health and life insurance and well-being benefits, based on location
• Pension / Retirement benefits
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
• DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).

The impact you will have in this role:

The Cybersecurity Services domain protects DTCC from cybersecurity risks through world class security architecture, engineering and governance practices. Enterprise Certification Management Services (ECMS) team under Cybersecurity Services drives and improves Public Key Infrastructure (PKI) and certificate management across the entire DTCC technology estate. The ECMS team partners with other DTCC technology teams to design and implement PKI automation and standard methodology across the company. The successful candidate is someone who has solid attention to detail, as well as motivation to collaborate and share their technical knowledge around automation and security standard methodologies.

The main focus areas for the ECMS team are:

• Ensures accurate inventory of the certificates in use in our environment
• Creates and manages automation and workflows relevant for certificate management
• Supports technology teams across DTCC for all aspects of certificate life-cycle management (Discovery, Generation, Distribution, Rotation and Revocation)

Your Primary Responsibilities:

• Design processes and workflows for generation, rotation and revoking certificates
• Document PKI and certificate management guidance for the company
• Identify automation opportunities for certificate lifecycle
• Acts as the domain specialist to help guide and shape how certificate management services are enabled
• Design new certificate management services, integrations and technologies

*Note: Responsibilities of this role are not limited to the details above*

Qualifications:

• Bachelor's degree and/or equivalent experience preferred
• Minimum of 3-5 years of related experience

Talents Needed for Success:

• Strong Information Security experience, specifically in multi-tier PKI/Cryptography environment.
• Proven experience with configuring certificate authorities, templates and troubleshooting certificates (TLS handshakes)
• Solid experience with SCEP protocol, OCSP, CRL and X.509 extensions.
• Solid understanding of PKI network HSM's and performing key signing ceremonies
• Experience with Windows Power Shell scripting would be a plus

The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

About Us

DTCC safeguards the financial markets and helps them run efficiently, in times of prosperity and crisis. We are uniquely positioned at the center of global trading activity, processing over 100 million financial transactions every day, pioneering industry-wide, post-trade solutions and maintaining multiple data and operating centers worldwide. From where we stand, we can anticipate the industry's needs and we're working to continually improve the world's most resilient, secure and efficient market infrastructure. Our employees are driven to deliver innovative technologies that improve efficiency, lower cost and bring stability and certainty to the post-trade lifecycle.

DTCC proudly supports Flexible Work Arrangements favoring openness and gives people freedom to do their jobs well, by encouraging diverse opinions and emphasizing teamwork. When you join our team, you'll have an opportunity to make meaningful contributions at a company that is recognized as a thought leader in both the financial services and technology industries. A DTCC career is more than a good way to earn a living. It's the chance to make a difference at a company that's truly one of a kind.

Learn more about Clearance and Settlement by clicking here.

About the Team

Our Risk Management teams work to protect the safety and soundness of our systems and are responsible for identifying, managing, measuring and mitigating a spectrum of key risk types including credit, market, liquidity, systemic, operational and technology in all existing and new products, activities, processes and systems.

The Technology Risk Management department is responsible for setting strategic direction in the areas of IT Risk and Information Security. They are accountable for maintaining DTCC's corporate security policies and control standards and acting as an operational arm for monitoring threat intelligence.