PKI Specialist (Public Key Infrastructure)

PROJECT INFORMATION:

• Industry: Banking

• Work model: Hybrid (3/week in Warsaw/Łódź/Gdańsk/Gdynia)

• Remuneration: up to 155 PLN/h netto + VAT (B2B)

Summary: This role focuses on leading the implementation of a global mandate in Bank to adjust Client Authentication from TLS public certificates, while also supporting digital certificate discovery.

Main Responsibilities:

• Driving and implementing the global mandate regarding Client Authentication EKU removal from TLS public certificates.

• Implementation of solutions for inward and outward facing trust.

• Providing communication, support, and training for application teams and other areas of the bank as necessary.

• Discovering various digital certificates within the bank, including:

  • Analyzing internal tools currently in use as well as potential external tools for discovery.

  • Assessing discovered certificates, including types, non-compliances, and remediation proposals.

Key Requirements:

• 5+ years of experience in the IT industry with practical experience in the PKI area.

• Knowledge of public vs. private Certificate Authorities (CAs) and their respective trust chains and issuance policies.

• Understanding of TLS, particularly mutual TLS (mTLS), and validation of client certificates.

• Familiarity with operating systems and infrastructure components (networks, certificates, domains, etc).

• Analytical and problem-solving skills, capable of navigating complex technical environments.

• Planning skills to prevent service disruptions.

• Strong communication skills to articulate objectives and content clearly for diverse audiences.

• A collaborative team player attitude.

Nice to Have:

• Experience with other cryptographic algorithms and key management systems.

Other Details:

• Physical Location: Poland - Gdynia/Gdańsk/Warsaw/Łódź

• Required Language: English