Discover your future at Citi

Working at Citi is far more than just a job. A career with us means joining a team of more than 230,000 dedicated people from around the globe. At Citi, you’ll have the opportunity to grow your career, give back to your community and make a real impact.

Job Overview

The purpose of thisroleis to design,developand engineer Cryptographic,PKIand Certificate managementSystems alongside existingengineeringteam members fulfilling corporate requirements,policiesand standards.
The candidate will take part in definingcryptographic standards, architectures, and governance,and helpdevelopCiti’s nextgeneration crypto ecosystem, alarge scaleenterprise security solutions usingthe latestadvancements in cryptography and information securityandadvanced algorithms.

Certificate managementengineering, focused onautomated certificate management, deployment, renewal in various clients, applications operating systems;cryptographic protocolsand controls, including but not limited to, post-quantum cryptography, PKI solutions, and strategic vendor interaction.

Thecandidate’s responsibilitieswill also includeworking with advanced mathematical algorithmswithinPKI.Theengineerwill participant indevice and usercertificatemanagementfocusing oncertificatelifecycleautomationprojects in Citi, includingcertificate automation for microservices, desktops, servers, Windows/Unix hosts,network securitydevicesand otherappliances.

Responsibilities:

• The candidate's primary responsibility will be todesign and introduce enterprise level certificate automation processes and solutions,which will include working on PKI architecturesas well.

  
  

• The candidate must have experience with PKI andagoodunderstanding of cryptography, includingthe principles related to PKI, private keys, encryption methods, CRL, and advanced key usages. 

  
  

• Work with all disciplines, engineers, and operational product owners to integrate PKI and certificate management related technologies with Citi platforms to protect and manage the cryptography of mission critical systems. 

  
  

• Perform product evaluation, testing and certification of PKI and Crypto technologies. Ensure that all security products meet or exceed Citi internal and regulatory requirements.

  
  

• Provide occasional 4th level support for the product toolset. 

  
  

• Produce documentation of processes and procedures for the usage of the product. 

  
  

• Follow the Technology Development Life Cycle in the development of all security tools.​

  
  

Qualifications:

• Strong solid experience in cryptography,crypto protocols/algorithmsand peripheral technologies isrequired.

  
  

• Must be familiar with information security concepts, bestpracticesandsolutions.

  
  

• Must have a strongengineerbackground

  
  

• Database knowledge, preferably MSSQL and scripting background, preferablyPowershellisrequired. 

  
  

• Experience withcommercial Certificate Authority (CA)products and/orcertificate management systemsis a plus.

  
  

• Understanding of Microsoft Windowsand Unixoperating systems

  
  

• Sound security engineering principles as background to understanding the inner workings of the systems and controls that form an enterprise security ecosystem

  
  

• Understanding of symmetric key encryptionand asymmetricencryption

  
  

• Experience with a variety of HSM platformsis a plus

  
  

• Working with Trust Providers is a plus.

  
  

​

Education:

• Bachelor’s degree/University degree or equivalent experience

  
  

• Master’s degree preferred

  
  

• Information Security Certification(s)

  
  

------------------------------------------------------

Job Family Group: Technology

------------------------------------------------------

Job Family:Systems & Engineering

------------------------------------------------------

Time Type:Full time

------------------------------------------------------

Most Relevant Skills Please see the requirements listed above.

------------------------------------------------------

Other Relevant Skills For complementary skills, please see above and/or contact the recruiter.

------------------------------------------------------

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.
View Citi’s EEO Policy Statement and the Know Your Rights poster.