CrawlJobs Logo

PKI Engineering Group Manager

https://www.citi.com/ Logo

Citi

Location Icon

Location:
Hungary , Budapest

Category Icon

Job Type Icon

Contract Type:
Not provided

Salary Icon

Salary:

Not provided

Job Description:

Within Citi, the PKI Engineering Team is focusing on cryptographic protocols, mainly but not limited to, defining next generation PKI architecture,post quantum cryptography, PKI solutions for on-prem and Cloud Providers, and strategic vendor interaction. This role is to lead a team of highly motivated PKI engineers who engineer PKI Solutions to protect the Data of the firm. This team is part of the Data Security department at Citi.

Job Responsibility:

  • Manage a team of Public key Infrastructure(PKI) engineers, supporting certificate solutions for internal and external stakeholders, drive projects within the group and creating a technology domain roadmap
  • Ensure that all integration of functions meet business goals
  • Define necessary system enhancements to deploy new products and process enhancements
  • Recommend suitable products or product customization for system integration
  • Identify problem causality, business impact and root causes
  • Create PKI solutions for a large company
  • Improve engineering capabilities for timely delivery of projects
  • Collaborate with partners in Engineering, Operations and Business
  • Perform product evaluation, testing and certification of PKI and Crypto technologies. Ensure that all security products meet or exceed Citi internal and regulatory requirements
  • Provide occasional 4th level engineering support for the product toolset
  • Prepare documentation of processes and procedures for the usage of the product
  • Follow the Technology Development Life Cycle in the development of all security tools

Requirements:

  • 10+ years experience in cryptography, PKI, and strong understanding of cryptography and mathematical algorithms
  • Understanding the principles related to PKI, private keys, encryption methods, CRL, advanced key usages and post quantum cryptography
  • Deep Understanding of Microsoft Windows and Linux operating systems and cryptographic protocols
  • Knowledge of Crypto Libraries (bouncy castle)
  • Symmetric Key Encryption and Asymmetric Encryption
  • Experience with a variety of HSM platforms, Certificate Authority systems and Cloud Providers
  • Working with Trust Providers is a plus
  • Comprehensive knowledge of design metrics, analytics tools, benchmarking activities and related reporting to identify best practices
  • Demonstrated analytic/diagnostic skills
  • Ability to work in a matrix environment and partner with virtual teams
  • Ability to work independently, multi-task, and take ownership of various parts of a project or initiative
  • Proven track record of operational process change and improvement
  • Fluent English language skills
  • Bachelor's Degree in any STEM area

Nice to have:

Working with Trust Providers is a plus

What we offer:
  • Cafeteria Program
  • Home Office Allowance (for colleagues working in hybrid work models)
  • Paid Parental Leave Program (maternity and paternity leave)
  • Private Medical Care Program and onsite medical rooms at our offices
  • Pension Plan Contribution to voluntary pension fund
  • Group Life Insurance
  • Employee Assistance Program
  • Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed
  • Flexible work arrangements to support you in managing work - life balance
  • Career progression opportunities across geographies and business lines
  • Socially active employee communities with diverse networking opportunities

Additional Information:

Job Posted:
April 26, 2025

Employment Type:
Fulltime
Work Type:
Hybrid work
Job Link Share:

Looking for more opportunities? Search for other job offers that match your skills and interests.

Briefcase Icon

Similar Jobs for PKI Engineering Group Manager

Senior Systems Engineer

The role involves designing, implementing, and managing core IT infrastructure w...
Location
Location
United States , Jersey City
Salary
Salary:
Not provided
https://www.roberthalf.com Logo
Robert Half
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor’s degree in IT or a related field, or equivalent professional experience
  • Minimum of 7 years in IT infrastructure management
  • At least 5 years of hands-on VMware experience
  • Proficiency with Windows Servers, Active Directory, Group Policy, DNS/DHCP, PKI, and VMware vSphere
  • Experience with Veeam, Rubrik, Zerto, and CommVault
  • Knowledge of SAN, NAS, Storage Spaces Direct, NetApp, Dell EMC, and HPE storage systems
  • Expertise with monitoring tools such as SolarWinds, SCOM, and PRTG
  • Preferred certifications include VCP, VCAP, or VCDX
  • Additional certifications in Microsoft, Cisco, or cloud platforms (Azure/AWS) are a plus
  • Strong problem-solving, communication, and teamwork skills
Job Responsibility
Job Responsibility
  • Design, deploy, and maintain enterprise servers, storage, and networking solutions
  • Monitor performance, troubleshoot issues, and lead upgrade and migration initiatives
  • Oversee VMware vSphere, ESXi, and vCenter to maximize performance and cost-efficiency
  • Develop automation scripts using PowerShell, PowerCLI, and Python
  • Enforce security best practices and compliance standards
  • Work with cross-functional teams, mentor junior engineers, and document infrastructure processes
What we offer
What we offer
  • Medical, vision, dental, and life and disability insurance
  • Eligibility to enroll in company 401(k) plan
  • Free online training
  • Competitive compensation
  • Fulltime
Read More
Arrow Right
New

Senior Systems Engineer

Our client is looking for a Senior Systems Engineer at their location. The role ...
Location
Location
United States , Saddle Brook
Salary
Salary:
Not provided
https://www.roberthalf.com Logo
Robert Half
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Proficiency with Windows Servers, Active Directory, Group Policy, DNS/DHCP, PKI, and VMware vSphere
  • Experience with Veeam, Rubrik, Zerto, and CommVault, including high availability and multi-site failover strategies
  • Knowledge of SAN, NAS, Storage Spaces Direct, NetApp, Dell EMC, and HPE storage systems
  • Expertise with monitoring tools such as SolarWinds, SCOM, and PRTG, along with performance tuning and root cause analysis
  • Bachelor’s degree in IT or a related field, or equivalent professional experience
  • A minimum of 7 years in IT infrastructure management, with at least 5 years of hands-on VMware experience
  • Preferred certifications include VCP, VCAP, or VCDX
  • Additional certifications in Microsoft, Cisco, or cloud platforms (Azure/AWS) are a plus
  • Strong problem-solving, communication, and teamwork skills
  • Self-motivated and adaptable in a dynamic environment
Job Responsibility
Job Responsibility
  • Design, deploy, and maintain enterprise servers, storage, and networking solutions
  • Monitor performance, troubleshoot issues, and lead upgrade and migration initiatives
  • Oversee VMware vSphere, ESXi, and vCenter to maximize performance and cost-efficiency, including managing virtual machine provisioning, snapshots, and backups
  • Develop automation scripts using PowerShell, PowerCLI, and Python
  • Enforce security best practices and compliance standards
  • Work with cross-functional teams, mentor junior engineers, and document infrastructure processes
What we offer
What we offer
  • medical, vision, dental, and life and disability insurance
  • eligible to enroll in our company 401(k) plan
Read More
Arrow Right

Network Engineer

AAC Inc is seeking a highly skilled and motivated professional to join our team ...
Location
Location
United States , Camp Pendleton
Salary
Salary:
Not provided
aac.com Logo
AAC
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Active Secret clearance
  • 10+ years of experience
  • High School Diploma or greater
  • IAT Level III certification in one of: Cisco Certified Security Professional (CCSP), Fortinet Certified Network Security Professional (FCNSP), Juniper Networks Certified Specialist Security (JNCIP-SEC), Certified Modeling & Simulation Professional (CMSP), Cisco Certified Network Practitioner (CCNP)
  • Experience assisting Government Lead in daily engineering duties
  • Experience evaluating communication hardware/software and troubleshooting LAN/BAN/WAN
  • Experience providing technical leadership in integration and test of complex large-scale computer integrated networks
  • Experience scheduling conversions and cutovers
  • Experience designing and providing near real time full spectrum situational awareness of IT services
  • Experience delivering Navy/Marine Corps NetOps control and visibility via electronic network management systems
Job Responsibility
Job Responsibility
  • Assist the Government Lead in the daily engineering duties on systems
  • Evaluate communication hardware and software communication, troubleshoot LAN/BAN/WAN and other network related problems
  • Provide technical leadership in the integration and test of complex large-scale computer integrated networks
  • Schedule conversions and cutovers
  • Design and provide near real time full spectrum situational awareness of IT services, events, incidents, and infrastructure to support vulnerability analyses
  • Deliver Navy/Marine Corps NetOps control and visibility via electronic network management systems and Command and Control (C2) facilities
  • Facilitate the Government’s exercise of network operational control over critical services and infrastructure
  • Design and perform schema extensions for directory services
  • Perform system integration and server installation on server hardware
  • Perform system backup (Disaster Recovery), security updates, and system integration with HBSS
  • Fulltime
Read More
Arrow Right
New

Senior Active Directory Engineer

Software Resources has an immediate job opportunity for a Senior Active Director...
Location
Location
United States , Seattle
Salary
Salary:
94.00 - 97.00 USD / Hour
softwareresources.com Logo
Software Resources
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Minimum of 5 years of related work experience
  • Demonstrated experience designing, implementing, and integrating enterprise-level highly connected hybrid LDAP solutions with at least 40,000 users, including: Active Directory, Azure Active Directory, Microsoft Identity Manager, Active Directory Federation Services / AADC
  • Integrations between key services and various LDAP providers
  • Experience in engineering, designing, and integrating both infrastructure components (domain controllers, sites and services, connectivity, etc.) and logical aspects (GPO management, directory structure, and management toolsets)
  • Experience in project management of large IT initiatives
  • Experience working with and directing suppliers in an outsourced environment infrastructure
  • BA/BS Mandatory
Job Responsibility
Job Responsibility
  • AD modernization and standardization initiative, migrating on-premises Active Directory lifecycle management to a cloud-first identity model (Microsoft Entra ID/Azure AD)
  • Maintain and manage local AD on-prem devices and domain controllers, including operational support, incident response, and running reports (e.g., Power BI)
  • Collaborate with architects and senior engineers
  • contribute to process and system configuration, but not lead design efforts
  • Identify and implement automation opportunities to reduce manual tasks and ticket volume, proactively improving lifecycle management and user experience
  • Lead the assessment and analysis of the Domain controllers in the AD forest
  • Document and guide the operations team with the decommissioning, upgrade and migration of domain controllers
  • Analyze the existing use of PKI certificates in legacy directories and help migrate them into Microsoft's PKI service
  • Evaluate capabilities of services/products and design solutions to deliver future service offerings through detailed technical analysis
  • Define engineered designs, including full documentation
What we offer
What we offer
  • medical, dental, and vision coverage
  • a 401(k) with company match
  • short-term disability
  • life insurance with AD&D
  • Fulltime
Read More
Arrow Right
New

Senior Active Directory Engineer

Software Resources has an immediate job opportunity for a Senior Active Director...
Location
Location
United States , Burbank
Salary
Salary:
94.00 - 97.00 USD / Hour
softwareresources.com Logo
Software Resources
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Minimum of 5 years of related work experience
  • Demonstrated experience designing, implementing, and integrating enterprise-level highly connected hybrid LDAP solutions with at least 40,000 users, including: Active Directory, Azure Active Directory, Microsoft Identity Manager, Active Directory Federation Services / AADC
  • Integrations between key services and various LDAP providers
  • Experience in engineering, designing, and integrating both infrastructure components (domain controllers, sites and services, connectivity, etc.) and logical aspects (GPO management, directory structure, and management toolsets)
  • Experience in project management of large IT initiatives
  • Experience working with and directing suppliers in an outsourced environment infrastructure
  • BA/BS Mandatory
Job Responsibility
Job Responsibility
  • AD modernization and standardization initiative, migrating on-premises Active Directory lifecycle management to a cloud-first identity model (Microsoft Entra ID/Azure AD)
  • Maintain and manage local AD on-prem devices and domain controllers, including operational support, incident response, and running reports (e.g., Power BI)
  • Collaborate with architects and senior engineers
  • contribute to process and system configuration, but not lead design efforts
  • Identify and implement automation opportunities to reduce manual tasks and ticket volume, proactively improving lifecycle management and user experience
  • Lead the assessment and analysis of the Domain controllers in the AD forest
  • Document and guide the operations team with the decommissioning, upgrade and migration of domain controllers
  • Analyze the existing use of PKI certificates in legacy directories and help migrate them into Microsoft's PKI service
  • Evaluate capabilities of services/products and design solutions to deliver future service offerings through detailed technical analysis
  • Define engineered designs, including full documentation
What we offer
What we offer
  • medical, dental, and vision coverage
  • a 401(k) with company match
  • short-term disability
  • life insurance with AD&D
  • Fulltime
Read More
Arrow Right
New

Senior Active Directory Engineer

Software Resources has an immediate job opportunity for a Senior Active Director...
Location
Location
United States , Orlando
Salary
Salary:
Not provided
softwareresources.com Logo
Software Resources
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Minimum of 5 years of related work experience
  • Demonstrated experience designing, implementing, and integrating enterprise-level highly connected hybrid LDAP solutions with at least 40,000 users, including: Active Directory, Azure Active Directory, Microsoft Identity Manager, Active Directory Federation Services / AADC
  • Integrations between key services and various LDAP providers
  • Experience in engineering, designing, and integrating both infrastructure components (domain controllers, sites and services, connectivity, etc.) and logical aspects (GPO management, directory structure, and management toolsets)
  • Experience in project management of large IT initiatives
  • Experience working with and directing suppliers in an outsourced environment infrastructure
  • BA/BS Mandatory
Job Responsibility
Job Responsibility
  • AD modernization and standardization initiative, migrating on-premises Active Directory lifecycle management to a cloud-first identity model (Microsoft Entra ID/Azure AD)
  • Maintain and manage local AD on-prem devices and domain controllers, including operational support, incident response, and running reports (e.g., Power BI)
  • Collaborate with architects and senior engineers
  • contribute to process and system configuration, but not lead design efforts
  • Identify and implement automation opportunities to reduce manual tasks and ticket volume, proactively improving lifecycle management and user experience
  • Lead the assessment and analysis of the Domain controllers in the AD forest
  • Document and guide the operations team with the decommissioning, upgrade and migration of domain controllers
  • Analyze the existing use of PKI certificates in legacy directories and help migrate them into Microsoft's PKI service
  • Evaluate capabilities of services/products and design solutions to deliver future service offerings through detailed technical analysis
  • Define engineered designs, including full documentation
What we offer
What we offer
  • medical, dental, and vision coverage
  • a 401(k) with company match
  • short-term disability
  • life insurance with AD&D
Read More
Arrow Right

IT Infrastructure Architect

Alter Domus is looking for a talented IT Infrastructure Architect to enhance our...
Location
Location
Lithuania , Vilnius
Salary
Salary:
4750.00 - 7083.00 EUR / Month
alterdomus.com Logo
Alter Domus
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • At least 10 years of IT experience in financial industry, as an architect or senior engineer
  • Strong technical knowledge of Microsoft technologies, including server and client OS, Active Directory, SQL, EntraID, PKI, Microsoft 365 (OneDrive, SharePoint Online, Exchange Online, Intune)
  • Detailed technical knowledge of Citrix solutions
  • Experience in implementing Identity Governance and Administration solutions
  • Experience in implementing or managing datacenters and virtual environments
  • Experience in Collaboration and Communication solutions
  • Advanced technical knowledge of network related technologies (WAN, SD-WAN, LAN, Datacenter)
  • Managed Services and Cloud experience (Azure and AWS)
  • Familiar with ITIL framework, tickets and Change management and associated workflows
  • Strong understanding or experience of backup technologies and principles
Job Responsibility
Job Responsibility
  • Review, define and document new components of Alter Domus platform
  • Ensure that delivered solution are compliant with established standard
  • Establish strategic technology roadmap in line with application strategy and Business requirements
  • Manage relationship with key stakeholders in IT and external parties
  • Provide IT solutions to business requirements whilst aligning to IT strategies and standards
  • Facilitate sharing and alignment of knowledge & best practice with IT areas
  • Provide support to all IT group teams to provide guidance in different steps of projects
  • Work with the software architect team to adapt the infrastructure based on development requirements
  • Define new infrastructure security standards for new applications (cloud and on premise)
  • Anticipate and evaluate architecture risks
What we offer
What we offer
  • Support for professional accreditations such as ACCA and study leave
  • Flexible arrangements, generous holidays, plus an additional day off for your birthday
  • Continuous mentoring along your career progression
  • Active sports, events and social committees across our offices
  • 24/7 support available from our Employee Assistance Program
  • The opportunity to invest in our growth and success through our Employee Share Plan
  • Plus additional local benefits depending on your location
  • Fulltime
Read More
Arrow Right

Windows, AD and VMware Administrator

HPE Operations is our innovative IT services organization. It provides the exper...
Location
Location
India , Bangalore
Salary
Salary:
Not provided
https://www.hpe.com/ Logo
Hewlett Packard Enterprise
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Extensive troubleshooting and problem-solving for Windows OS, Windows Cluster, Performance issue, RDP issue and Hyper-V
  • Windows - Server 2016 till 2025 installation, configuration, and end to end support for OS related issues
  • Dump file analysis
  • Patching - Good Experience required in Windows patching
  • Tools - various MS tools like, Perfmon, procmon and netmon
  • Scripting – PowerShell scripting
  • Troubleshooting related to Active Directory
  • Working with Microsoft Identity technologies including Active Directory, Windows File Services, and Group Policies
  • Administering Active Directory (AD) and GPOs
  • Monitor and resolve issues related to Active Directory replication, SYSVOL consistency, and DFSR (Distributed File System Replication)
Job Responsibility
Job Responsibility
  • Extensive troubleshooting and problem-solving for Windows OS, Windows Cluster, Performance issue, RDP issue and Hyper-V
  • Windows - Server 2016 till 2025 installation, configuration, and end to end support for OS related issues
  • Dump file analysis
  • Patching - Good Experience required in Windows patching
  • Tools - various MS tools like, Perfmon, procmon and netmon
  • Scripting – PowerShell scripting
  • Troubleshooting related to Active Directory
  • Working with Microsoft Identity technologies including Active Directory, Windows File Services, and Group Policies
  • Administering Active Directory (AD) and GPOs
  • Monitor and resolve issues related to Active Directory replication, SYSVOL consistency, and DFSR (Distributed File System Replication)
What we offer
What we offer
  • Health & Wellbeing
  • Personal & Professional Development
  • Unconditional Inclusion
  • Fulltime
Read More
Arrow Right