Position Details:

Title: Tech Lead (Certificate Lifecycle Management)

Duration: 1-year (possible renewal)

Hours: 37.5 hours

Hybrid: 1 day mandatory on-site (Tuesday) + 1 day Friday mandatory once a month -5X/month onsite

Compensation:  $75-$80/Hour

Interview Process: 2 rounds

• 1st Round virtual
• 2nd Round in-person  

Day-to-Day:

• Work with Director to take on foundational work, along with a Tech Lead already on team.
• Integration work with other critical services at the bank
• Design, implement, integrate
• Work with CyberArk vendors to design, build, configure and deploy Digital Certificate Lifecycle Manager (DCLM) from DEV, UAT to PROD using CyberArk Certificate Manager SaaS
• Collaborate with Certificate operational team and other technology partners to integrate DCLM with DigiCert One and Sectigo CAs
• Work with other technology partners to design and integrate DCLM with critical enterprise services (e.g.,  GitHub, Ansible) to enable automated certificate renewals and deployment
• Provide production support, and work with AO partners on problem troubleshooting/solving
• Follow Agile methodology to setup environment, configure, test, debug, and document in order to ensure successful implementation and maintenance of the service during/post project

Must-haves:

• Must come from an enterprise background/level
• Excellent communication
• Experience designing and building enterprise security services, specifically highly available services
• Strong knowledge (8+ years) of digital certificate management and PKI space or experience design and build an enterprise security tool/service (e.g., CyberArk, HashiCorp, F5, Palo Alto) for a corporate environment
• Strong knowledge of Linux OS, Python or Shell scripting (ideally Python)
• Hands on experience with Ansible playbooks
• Hands on experiences with ServiceNow for change management and intake estimation in an corporate environment (e.g., banking)
• Deep understanding of high available system design and strong focus on operational excellence.
• Have knowledge/experience of DevOps Toolsets: GitHub, GitHub Actions/Jenkins and Artifactory

Nice-to-Haves:

• Cryptographic background as its niche
• CyberArk (they were acquired by Venafi, now by Palo Alto)- will be hard to find because of its name or vendor could be different