Job Description:
3+ years’ experience in PKI operations & administration
MUST have experience with any if the below PKI and Certificate Lifecycle Management solutions:
-
- Ascertia ADSS/CA
- Entrust Security Manager
- Primekey/ejbca/keyfactor
- Emudhra emSigner/CA
- Other commercial-off-the-shelf (COTS) used for implementing Certification Authority solutions
- Experience with hardware security module (HSM), experience with Thales (formerly Safenet) HSMs
- Experience in monitoring highly critical, security-sensitive environments is a plus
- Knowledge of access management processes and user account life cycles
- Strong documentation skills
- Experience with change management and testing software changes and implementations
- Knowledge and understanding of operating principles, practices, and procedures within an area of business specialty
- Strong team player – collaborates well with others to solve problems and actively incorporates input from various sources
- Strong analytical skills – strong problem-solving skills, communicates in a clear and succinct manner and effectively evaluates information/data to make decisions; anticipates obstacles and develops plans to resolve
- Change oriented – actively generates process improvements; supports and drives change, and confronts difficult circumstances in creative way.
Job responsibilities:
- Own the day-to-day operations including health check and application maintenance
- Monitor confidentiality, integrity and availability of the CA and other PKI components services
- Review audit log files for CA and other PKI components
- Provide technical support to government and private entities during the on boarding process
- Respond to PKI related incidents raised by entities or individuals using Dubai PKI services
- Execute the operational ceremonies (CA certificate management, Root CA CRL update, Cross certification)
- Change the policies and configurations of the CA and the other PKI components according to the approved updates on the applicable CP/CPS
- Test and implement the PKI applications’ updates and patches recommended by the vendors
- Test and implement the Hardware Security Modules (HSM) updates and patches recommended by the vendors
- Troubleshoot incidents and applies required software patches needed
- Engage with the datacenter provider for activities such as change requests
- Monitor the backup process configured for the CA and other components
- Collect the data required for the management reports and produce such reports
- Participate in the specification and delivery of pilot and proof-of-concepts for entities using Dubai PKI services
- Perform regular testing of the PKI disaster recovery and business continuity plan in close coordination with the other PKI operations team