CrawlJobs Logo

PKI Engineering Group Manager

https://www.citi.com/ Logo

Citi

Location Icon

Location:
Hungary , Budapest

Category Icon

Job Type Icon

Contract Type:
Not provided

Salary Icon

Salary:

Not provided

Job Description:

Within Citi, the PKI Engineering Team is focusing on cryptographic protocols, mainly but not limited to, defining next generation PKI architecture,post quantum cryptography, PKI solutions for on-prem and Cloud Providers, and strategic vendor interaction. This role is to lead a team of highly motivated PKI engineers who engineer PKI Solutions to protect the Data of the firm. This team is part of the Data Security department at Citi.

Job Responsibility:

  • Manage a team of Public key Infrastructure(PKI) engineers, supporting certificate solutions for internal and external stakeholders, drive projects within the group and creating a technology domain roadmap
  • Ensure that all integration of functions meet business goals
  • Define necessary system enhancements to deploy new products and process enhancements
  • Recommend suitable products or product customization for system integration
  • Identify problem causality, business impact and root causes
  • Create PKI solutions for a large company
  • Improve engineering capabilities for timely delivery of projects
  • Collaborate with partners in Engineering, Operations and Business
  • Perform product evaluation, testing and certification of PKI and Crypto technologies. Ensure that all security products meet or exceed Citi internal and regulatory requirements
  • Provide occasional 4th level engineering support for the product toolset
  • Prepare documentation of processes and procedures for the usage of the product
  • Follow the Technology Development Life Cycle in the development of all security tools

Requirements:

  • 10+ years experience in cryptography, PKI, and strong understanding of cryptography and mathematical algorithms
  • Understanding the principles related to PKI, private keys, encryption methods, CRL, advanced key usages and post quantum cryptography
  • Deep Understanding of Microsoft Windows and Linux operating systems and cryptographic protocols
  • Knowledge of Crypto Libraries (bouncy castle)
  • Symmetric Key Encryption and Asymmetric Encryption
  • Experience with a variety of HSM platforms, Certificate Authority systems and Cloud Providers
  • Working with Trust Providers is a plus
  • Comprehensive knowledge of design metrics, analytics tools, benchmarking activities and related reporting to identify best practices
  • Demonstrated analytic/diagnostic skills
  • Ability to work in a matrix environment and partner with virtual teams
  • Ability to work independently, multi-task, and take ownership of various parts of a project or initiative
  • Proven track record of operational process change and improvement
  • Fluent English language skills
  • Bachelor's Degree in any STEM area

Nice to have:

Working with Trust Providers is a plus

What we offer:
  • Cafeteria Program
  • Home Office Allowance (for colleagues working in hybrid work models)
  • Paid Parental Leave Program (maternity and paternity leave)
  • Private Medical Care Program and onsite medical rooms at our offices
  • Pension Plan Contribution to voluntary pension fund
  • Group Life Insurance
  • Employee Assistance Program
  • Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed
  • Flexible work arrangements to support you in managing work - life balance
  • Career progression opportunities across geographies and business lines
  • Socially active employee communities with diverse networking opportunities

Additional Information:

Job Posted:
April 26, 2025

Employment Type:
Fulltime
Work Type:
Hybrid work
Job Link Share:

Looking for more opportunities? Search for other job offers that match your skills and interests.

Briefcase Icon

Similar Jobs for PKI Engineering Group Manager

Senior Active Directory Engineer

Seeking a Senior Active Directory Engineer to lead the assessment, migration, an...
Location
Location
United States , Burbank; Orlando; Seattle
Salary
Salary:
85.00 USD / Hour
bhsg.com Logo
Beacon Hill
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 5+ years of experience designing, implementing, and managing enterprise Active Directory environments
  • Expertise in Active Directory, Azure AD, Microsoft Identity Manager, ADFS, and AADC
  • Strong understanding of LDAP integrations, domain controller infrastructure, and security best practices
  • Experience with PKI certificate management, migration, and compliance
  • Ability to troubleshoot AD, DNS, and authentication-related issues
  • Experience leading large IT infrastructure projects, including vendor coordination
Job Responsibility
Job Responsibility
  • Lead assessment, migration, and decommissioning of AD domain controllers
  • Design and implement LDAP-based identity management solutions across AD, Azure AD, and Microsoft Identity Manager
  • Migrate PKI certificates to Microsoft's PKI service while ensuring compliance with security policies
  • Optimize AD replication, site topology, and Group Policy (GPO) management
  • Identify and remediate stale objects, orphaned accounts, and unused policies
  • Troubleshoot and resolve AD, DNS, and PKI-related issues while collaborating with security teams
  • Document configurations, policies, and procedures
  • Fulltime
Read More
Arrow Right

HPCC Linux Engineer

The HPCC Systems Engineer will work with the HPCC team to architect, build, mana...
Location
Location
United States , McLean
Salary
Salary:
Not provided
leadingpath.com Logo
Leading Path Consulting
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Active TS/SCI w/ FS Poly required prior to application
  • Bachelor's degree in Computer Science, Information Technology, or other related technical discipline, or equivalent combination of education, technical certifications, training, and work/military experience
  • At least five (4) years of related HPCC experience
  • At least five (4) years of related Linux OS tools experience
  • Demonstrated experience with operating, configuring, and deploying the HPCC platform, to include Thor and Roxie, in physical server, VM, and Kubernetes environments
  • Design, develop, and maintain infrastructure configurations
  • Proficiency in scripting and query languages including Python, Bash, PhP, and SQL
  • Understanding of large data, complex, and parallel processing techniques
  • Familiar with file formats like CSV, Parquet, JSON, and XML
  • Sound knowledge of Linux OS and demonstrated hands-on experience with Linux-based systems and shell scripting
Job Responsibility
Job Responsibility
  • Work with a team to update, automate, deploy, and operate data processing and model building workloads using the HPCC system
  • Coordinate with model building and data engineering teams to ingest, model, and deploy new and updated data sources
  • Support model building, data analysts, and other HPCC users with ECL workunit issues, code corrections, and code improvements
  • Collaborate cross-functionally with systems engineers, software engineers, data scientists, analysts, project managers, and other engineering groups
  • Troubleshoot complex problems and provide customer support for software systems and application issues
  • Write and update technical documentation such as system documentation, training materials, processes, and procedures
  • Provide recommendations for continuous improvement
  • Work alongside other engineers on the team to sustain and advance our organization’s capabilities
What we offer
What we offer
  • Vacation – 5 weeks of accrued paid vacation per year (i.e., 8.33 hours accrued per pay period worked)
  • Holidays - Paid holidays published annually by the Office of Personnel Management, excluding Inauguration Day
  • 100% paid for Health Benefits* (United Healthcare, Guardian Dental, VSP Vision, MetLife, Life and Disability Insurance and annual $1500 employer HSA contribution on qualified plans) *health benefits kick in the 1st of the month following your start date
  • 6% 401k Contribution (3% paid out during each pay period, the additional 3% will be paid out as a lump sum in Q1 each year)
  • Training Reimbursement – Approved training and education expenses will be reimbursed
  • Invitation to regular team events, lunches, dinners, activities, etc.
  • Fulltime
Read More
Arrow Right

AD Technical Lead

Seeking a highly skilled Tech Lead – Active Directory & Entra ID Services respon...
Location
Location
India , Bengaluru
Salary
Salary:
Not provided
cigres.com Logo
Cigres
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 10–12 years of relevant experience in Active Directory and Entra ID management
  • At least 2–3 years in a leadership role
  • Deep understanding of Windows Server infrastructure, DNS, PKI, and IAM principles
  • Strong PowerShell scripting and automation experience
  • Demonstrated experience in customer-facing service delivery and technical leadership
  • Excellent communication, stakeholder management, and reporting skills
  • Strong problem-solving and analytical mindset with the ability to manage critical incidents under pressure
  • Engineering Graduate or Equivalent
Job Responsibility
Job Responsibility
  • Lead L2/L3 support for Active Directory and Entra ID environments
  • Own and drive technical delivery, ensuring SLAs, KPIs, and compliance targets are met
  • Act as a primary technical and operational escalation point for identity and directory-related incidents
  • Coordinate and manage incident, problem, and change management processes for AD/Entra services
  • Participate in reviews with stakeholders and provide actionable insights
  • Prepare and deliver service performance reports, and management updates
  • Drive continuous improvement, automation, and standardization across the environment
  • Collaborate with project teams to support new implementations, migrations, and transformations
  • Maintain strong customer relationships, ensuring satisfaction and proactive communication
  • Manage day-to-day operations of the team, including workload allocation and task prioritization
  • Fulltime
Read More
Arrow Right

Senior Active Directory Engineer

Seeking a Senior Active Directory Engineer to lead the assessment, migration, an...
Location
Location
United States , Burbank; Orlando; Seattle
Salary
Salary:
85.00 USD / Hour
bhsg.com Logo
Beacon Hill
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 5+ years of experience designing, implementing, and managing enterprise Active Directory environments
  • Expertise in Active Directory, Azure AD, Microsoft Identity Manager, ADFS, and AADC
  • Strong understanding of LDAP integrations, domain controller infrastructure, and security best practices
  • Experience with PKI certificate management, migration, and compliance
  • Ability to troubleshoot AD, DNS, and authentication-related issues
  • Experience leading large IT infrastructure projects, including vendor coordination
Job Responsibility
Job Responsibility
  • Lead assessment, migration, and decommissioning of AD domain controllers
  • Design and implement LDAP-based identity management solutions across AD, Azure AD, and Microsoft Identity Manager
  • Migrate PKI certificates to Microsoft's PKI service while ensuring compliance with security policies
  • Optimize AD replication, site topology, and Group Policy (GPO) management
  • Identify and remediate stale objects, orphaned accounts, and unused policies
  • Troubleshoot and resolve AD, DNS, and PKI-related issues while collaborating with security teams
  • Document configurations, policies, and procedures
  • Fulltime
Read More
Arrow Right

Senior Systems Engineer

The role involves designing, implementing, and managing core IT infrastructure w...
Location
Location
United States , Jersey City
Salary
Salary:
Not provided
https://www.roberthalf.com Logo
Robert Half
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor’s degree in IT or a related field, or equivalent professional experience
  • Minimum of 7 years in IT infrastructure management
  • At least 5 years of hands-on VMware experience
  • Proficiency with Windows Servers, Active Directory, Group Policy, DNS/DHCP, PKI, and VMware vSphere
  • Experience with Veeam, Rubrik, Zerto, and CommVault
  • Knowledge of SAN, NAS, Storage Spaces Direct, NetApp, Dell EMC, and HPE storage systems
  • Expertise with monitoring tools such as SolarWinds, SCOM, and PRTG
  • Preferred certifications include VCP, VCAP, or VCDX
  • Additional certifications in Microsoft, Cisco, or cloud platforms (Azure/AWS) are a plus
  • Strong problem-solving, communication, and teamwork skills
Job Responsibility
Job Responsibility
  • Design, deploy, and maintain enterprise servers, storage, and networking solutions
  • Monitor performance, troubleshoot issues, and lead upgrade and migration initiatives
  • Oversee VMware vSphere, ESXi, and vCenter to maximize performance and cost-efficiency
  • Develop automation scripts using PowerShell, PowerCLI, and Python
  • Enforce security best practices and compliance standards
  • Work with cross-functional teams, mentor junior engineers, and document infrastructure processes
What we offer
What we offer
  • Medical, vision, dental, and life and disability insurance
  • Eligibility to enroll in company 401(k) plan
  • Free online training
  • Competitive compensation
  • Fulltime
Read More
Arrow Right

Senior Systems Engineer

Our client is looking for a Senior Systems Engineer at their location. The role ...
Location
Location
United States , Saddle Brook
Salary
Salary:
Not provided
https://www.roberthalf.com Logo
Robert Half
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Proficiency with Windows Servers, Active Directory, Group Policy, DNS/DHCP, PKI, and VMware vSphere
  • Experience with Veeam, Rubrik, Zerto, and CommVault, including high availability and multi-site failover strategies
  • Knowledge of SAN, NAS, Storage Spaces Direct, NetApp, Dell EMC, and HPE storage systems
  • Expertise with monitoring tools such as SolarWinds, SCOM, and PRTG, along with performance tuning and root cause analysis
  • Bachelor’s degree in IT or a related field, or equivalent professional experience
  • A minimum of 7 years in IT infrastructure management, with at least 5 years of hands-on VMware experience
  • Preferred certifications include VCP, VCAP, or VCDX
  • Additional certifications in Microsoft, Cisco, or cloud platforms (Azure/AWS) are a plus
  • Strong problem-solving, communication, and teamwork skills
  • Self-motivated and adaptable in a dynamic environment
Job Responsibility
Job Responsibility
  • Design, deploy, and maintain enterprise servers, storage, and networking solutions
  • Monitor performance, troubleshoot issues, and lead upgrade and migration initiatives
  • Oversee VMware vSphere, ESXi, and vCenter to maximize performance and cost-efficiency, including managing virtual machine provisioning, snapshots, and backups
  • Develop automation scripts using PowerShell, PowerCLI, and Python
  • Enforce security best practices and compliance standards
  • Work with cross-functional teams, mentor junior engineers, and document infrastructure processes
What we offer
What we offer
  • medical, vision, dental, and life and disability insurance
  • eligible to enroll in our company 401(k) plan
Read More
Arrow Right

Active Directory Specialist

Over 8 years of involvement in engineering or architecture roles, focusing on th...
Location
Location
India , Hyderabad
Salary
Salary:
2500000.00 / Year
overturerede.in Logo
Overture Rede
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Over 8 years of involvement in engineering or architecture roles, focusing on the implementation of Windows server solutions within expansive enterprise server environments
  • Proficient in Windows Server versions 2019, 2016, 2012, 2012 R2, 2008, and 2008 R2, along with a deep understanding of Active Directory
  • Skilled in installing and configuring Active Directory domain controllers
  • Knowledgeable in certificate-based authentication and Public Key Infrastructure (PKI)
  • Capable of installing, configuring, and troubleshooting DNS for Active Directory, as well as managing Group Policy and AD security solutions
  • Handle and generate change requests using incident/problem management tools, preferably ServiceNow (SNOW)
  • Work Experience 5+ years
Job Responsibility
Job Responsibility
  • Configure AD servers according to customer specifications
  • Deploy Microsoft security updates and patches
  • Apply change management processes for upgrading Active Directory environments
  • Oversee system properties, policies, and services within the top-level Active Directory domain structure, delegating control in lower-level domains
  • Manage Active Directory domain controller FSMO roles
  • Administer Group Policy Objects (GPO)
  • Add, remove, and configure Active Directory sites, site links, and subnets
  • Install and configure DHCP servers
  • Troubleshoot and resolve Directory Replication Service issues
  • Establish and remove Trust relationships
  • Fulltime
Read More
Arrow Right

Network Engineer

AAC Inc is seeking a highly skilled and motivated professional to join our team ...
Location
Location
United States , Camp Pendleton
Salary
Salary:
Not provided
aac.com Logo
AAC
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Active Secret clearance
  • 10+ years of experience
  • High School Diploma or greater
  • IAT Level III certification in one of: Cisco Certified Security Professional (CCSP), Fortinet Certified Network Security Professional (FCNSP), Juniper Networks Certified Specialist Security (JNCIP-SEC), Certified Modeling & Simulation Professional (CMSP), Cisco Certified Network Practitioner (CCNP)
  • Experience assisting Government Lead in daily engineering duties
  • Experience evaluating communication hardware/software and troubleshooting LAN/BAN/WAN
  • Experience providing technical leadership in integration and test of complex large-scale computer integrated networks
  • Experience scheduling conversions and cutovers
  • Experience designing and providing near real time full spectrum situational awareness of IT services
  • Experience delivering Navy/Marine Corps NetOps control and visibility via electronic network management systems
Job Responsibility
Job Responsibility
  • Assist the Government Lead in the daily engineering duties on systems
  • Evaluate communication hardware and software communication, troubleshoot LAN/BAN/WAN and other network related problems
  • Provide technical leadership in the integration and test of complex large-scale computer integrated networks
  • Schedule conversions and cutovers
  • Design and provide near real time full spectrum situational awareness of IT services, events, incidents, and infrastructure to support vulnerability analyses
  • Deliver Navy/Marine Corps NetOps control and visibility via electronic network management systems and Command and Control (C2) facilities
  • Facilitate the Government’s exercise of network operational control over critical services and infrastructure
  • Design and perform schema extensions for directory services
  • Perform system integration and server installation on server hardware
  • Perform system backup (Disaster Recovery), security updates, and system integration with HBSS
  • Fulltime
Read More
Arrow Right