Greetings,
One of our client is urgently looking *(PKI) Design Architect, *below is the Job description, please feel free to call me back at 410-525-5065. *Title: (PKI) Design Architect* *Duration: 6-12 Months* *Location: San Jose CA* *H1B Acceptable with Strong Comm skills* *Prefer USC * *Description: * Seeking a senior PKI Design Architect to work with the design and implementation team responsible for all engineering and delivery aspects of the PKI infrastructure of the entire IT environment. The deployment is envisaged to be a hybrid Microsoft PKI based on industry best practices that will issue both internal only and externally trusted certificates as well as SSL/TLS and Code Signing. This includes the capability to design the core infrastructure required to facilitate the deployment of a production as well as development environments for testing against issuing certificates for users, devices, services and various applications and interaction with all county systems. The candidate must possess the ability to coordinate and support large and complex projects including application systems upgrades, migration, transitioning, integration and deployment of new capabilities and enhancements. *The KPI Architect will:* • Be primarily responsible for gathering design requirements for the PKI operations, including security, application, technical, business, and external requirements. This will also include identifying and specifying each type of certificate required for the infrastructure, which zone each CA server will be placed in, and further identify which certificates are internal only and which certificates must be externally-trusted. Any firewall rules required will also be defined. • Design the logical and physical CA hierarchies and write certificate policies, including defining certificate profiles and restrictions to fulfill PKI CA project requirements • Provide architectural and implementation guidance to various stakeholders on deploying and utilizing digital certificates, cryptographic keys, or other cryptographic technologies • Provide training and technical guidance to stakeholders on PKI processes and procedures and the proper use of CA software • Identify and document requirements for CA software and HSM enhancements • Define and execute key management and key signing ceremonies • Develop strategies and tools and documentation to track and address certificate lifecycle management requirements, including certificates revocation activities for the CA hierarchies *Experience Requirement:* • Hands-on familiarity with and working knowledge of Active Directory and its integration with Microsoft PKI, Certificate Services and related components Experience with certificate-enabled applications, such as SSL/TLS, S/MIME, authentication, EFS, 802.1X, Code Signing, etc. In-depth knowledge and understanding of PKI and cryptographic concepts, including symmetric and asymmetric cryptography, secure hash, digital signatures, CRL's, CDP, AIA, OCSP, Key Escrow and more. *Education Requirement:* • Bachelor or Master's degree or higher in engineering or a related field with 6-8 years of IT infrastructure integration experience with a recent focus on security • Industry certification such as CISSP or GIAC coupled with verifiable expertise in PKI infrastructure design and implementation • Demonstrated experience in managing HSM devices, including Thales and Gemalto (Safenet) LUNA HSMs • Strong enterprise Windows and Linux/UNIX systems administration and PKI transitioning, migration and integration experience • Experience leading (or being a senior member of) a highly technical team, preferably in a PKI implementation • Background in delivering full-life cycle projects • Strong analytical skills to solve ambiguous and complex problems, perform research to identify and derive solution opportunities • Strong written and oral communications skills Regards Mitul *Human Micro Systems, Inc.* Contact: 410-525-5065 Email: mitul.shu...@humanmicrosystemsinc.com http://humanmicrosystemsinc.com/ Gtalk: mitulgrs <mitul...@gmail.com> Yahoo: mitulrecruiter -- You received this message because you are subscribed to the Google Groups "oraapps" group. To unsubscribe from this group and stop receiving emails from it, send an email to oraapps+unsubscr...@googlegroups.com. To post to this group, send email to oraapps@googlegroups.com. Visit this group at https://groups.google.com/group/oraapps. For more options, visit https://groups.google.com/d/optout.
