Description
Good afternoonCurrently we are currently looking for some "Senior Solution Architect" for our customer in the Pharma / Life Science branch. Our customer is based in Basel.
General information:
Start: April 2017 or as soon as possible
Duration: 14 Month
Extension: possible
Capacity: 50% until 100% - depends on your capacity
Place: Basel
Why this project is interesting for you?
- High technology area
- nice colleagues
- good reachable with public transport
Information about the project:
We are initiating a PKI (public key infrastructure) redesign and upgrade project to build a new, enterprise-wide SHA-2 capable PKI infrastructure, plus to lifecycle the current SHA-1 capable infrastructure in parallel. Both PKI solutions are planned to be implemented in a virtualized environment (the current SHA-1 infrastructure is currently running on physical servers).
In order to support the project with expert knowledge and to extend the internal workforce required to handle the anticipated activities, we are looking for an experienced PKI expert / solution architect with extensive experience as a practitioner (technical engineer) for the duration of the project.
The core team (of 7 team members) is looking for a new team member 1) who is an expert in the PKI area, 2) who brings his knowledge into the team, and 3) who will also do some Documentation stuff (so not only knowledge transfer). The aim is to split the workload within the team. The Hiring Manager as well as the Technical Leader will coordinate the workflow.
Main Tasks:
- Be part of the project core team, collaborate with Engineering and Operations team members
- Provide PKI expert knowledge for design, build, test and migration
- Execute all necessary activities and installations (test, production) on time in collaboration with the project team, following internal processes (design, documentation, implementation in lab and production, etc.)
- Define and document the solution architecture and all required technical project documentation
- Define Testing approach incl. documentation; collaborate with test execution team as required
Requirements:
- 7+ years of experience of designing and implementing large global enterprise-wide PKI infrastructures as a technical engineer (experienced practitioner at various large enterprises) * Experience with building virtualized PKI infrastructure solutions * Experience with SHA1 to SHA2 migrations *
- Experience with installation and configuration of Enterprise/Stand-alone CA, Root CA/Intermediate CA/Subordinate CA, incl. usage of HSM *
- Strong skills to design automated certificate enrollment, automated certificate approval, or Manual Approval process/procedure * Expert knowledge on design and architecture of Microsoft PKI *
- Expertise to design and implement policy for enrolling, approving certificates for Non-AD devices (Network devices, load-balancers, handhelds, etc.,) *
- Excellent English language skills (conversation, presentation, documentation) *
- Firm on PKI related knowledge like
- Security protocols, including SSL/TLS, OCSP
- Cryptography: SHA1, SHA2, RSA, DSA, ECC, Symmetric Key
- PKI standards including X509, PKCS family, PCKS#11, CRL
- Experience with hardware security module (like Luna CA4, Luna SA, AE Keryper and Cipher)
- Worked with different cryptographic options for CA
- Familiar with Crypto Libraries like BSAFE, OpenSSL
- Familiar with ASN.1, DER/BER encoding, Comfortable working in Linux, Windows
Nice to Haves:
+++ Former Pharma experience
++ 10-15 years of experience of designing and implementing large global
enterprise-wide PKI infrastructures Experience with migration of use
cases to Managed PKI solutions
+ Created Root Key Ceremony
+ Fluent in German
Next Steps If you are interested to work within a well educated team and an international environment, please be kind and provide us you latest updated CV (in word) also with 2 references.
We are looking forward to receive your reply.
In case of any questions, please do not hesitate to contact me.