[5888] Engineer (IdM/PKI)

Start date: Negotiable
Clearance: NATO Secret or equivalent
Location: Mons, Belgium (Remote working allowed if required)

Experience:
• Extensive knowledge of modern communication and Internet Protocol (IP) based networking technologies and systems including security aspects
• 3 years extensive experience with PKI System development, design, management
• Extensive knowledge of Information security and Cryptography (symmetric and asymmetric encryption, public key infrastructure (PKI) encryption, public key encryption, hash functions, digital signatures, digital certificates)
• Practical experience in Windows Servers, RHEL and VMware system administration
• Knowledge of the principles of computer and communications security, networking, and vulnerabilities of modern operating systems and applications
• Experience with SQL database administration
• Extensive experience in operating systems backup and restore
• Practical experience in scripting (Python, Powershell)
• Practical experience in SSL, TLS, and OpenSSL
• Extensive knowledge with Microsoft Excel

Desirable:
• VMware (VCA, VCP) and Linux RHEL system administration
• CISCO CCNA
• Microsoft Certified Solution Associate (MCSA)
• Microsoft Certified Solutions Expert (MCSE)
• Experience in development and implementation of computer security policies

Duties:
• Manage the NATO wide NPKI Registration Authorities
• Manage PKI virtualize and hardware infrastructure
• Manage and control of the lifecycle of end users and devices certificates for all NPKI CA's
• Manage all NPKI Windows Servers, RHEL and VMware environment including systems error log verification
• Manage NPKI Hardware Security Module (HSMs)
• Manage Card Management System
• Responsible for Entrust sub components connected to the NPKI CA especially in context of potential new services testing and integration
• Responsible for the creation of NPKI related guidance and procedures (SOP)
• Responsible for the delivery of 2nd and 3rd level technical support of CIS services to the NPKI customers
• Responsible for the NCIA ITSM ticketing system
• Responsible for certificate creation and Smart Cards enrolment
• Responsible for supporting all NATO exercises and missions
• Supervises the day-to-day operations /management /backup/restore of the PKI systems
• Installation and maintenance of NPKI components
• Certificate Authority components Log analysis, (Trouble shoot the system ALARM/ERRORS and monitor users and interfaces activity)
• Responsible for NPKI system documentation, hardware inventory, software configuration and inventory and regular systems and applications patching
• Be flexible to work outside normal office hours in response to crises, operational requirements
• Performs other duties as may be required