We are currently looking for PKI Expert (m/f/d) for our energy client Start: 18.04.22End: 31.12. 22Volume: 16hrs/ weekLocation: RemoteLanguage: German and EnglishBackground: The project has the aim to remove the PKI token (used for singing, authentication and encryption) from the client. In order to achieve this the project needs to provide clear guidance to stakeholders and proper communication to end-users. As part of the replacement we need to manage technical dependencies, advertise existing replacing technologies and expand the capabilities for Adobe Sign. The project will support stakeholders to migrate their dependencies and solve them. Alongside with that we will develop and implement a long term archiving solution in order to stay compliant with regulatory requirements. To fulfill some remaining requirements we will also implement a small scale new PKI modern solution. Alongside the project implementation we will also continue to deliver smaller improvements to the PKI landscape until we can switch it off. The initiative is a multiyear project spanning from 2021 to 2023.Tasks (performed independently):• Creation of S/MIME security concept and architecture to support the new PKI SMIME solution• Planing, Installing and configuring Certificate management PKI Components• Creation and realization of automation for TLS/SSL (Internal/External) and Azure Key Vault with ACME with pre-selected by the client Certificate Authority DigiCert• Analyze existing PKI infrastructure and consult for improvements based on given standards.• Establishing a new governance model for Azure Key Vault in the clients environment, collection of use cases and creation of proper documentation for it. Approved then internally by the SO and based on the new model a new service established• Maintenance of exiting PKI SNOW articles and creation of new documentation related to changes in the PKI Service.The client provides all necessary information, access to the systems and requirements in advance.Skills:• Senior Expert in PKI Area • Very good understanding of the functions of PKI Certificates (x.509 Standard) • Solid Experience with Microsoft Azure Key Vault and other MS Products (AD, AAD)• Good understanding of the functionalities of CA as well as PKI Client components (Windows 10) • Good understanding of the functionality for Authentication in applications, e.g Webserver IIS or Apache. • Good understanding of Email Signature and Encryption with Outlook 2019 und O365 • Good understanding of Digital Signature with Adobe und Office Documentation • Deep dive into Cloud-Technologien (MS Azure) und Hardware-Security modules • Modern thinking in terms of new IT Security concepts und Ideas creation/realization • Interest in innovations (Cloud-Technologies) • Possibility for business travels • Fluent German and Business English • Certifications in Cyber Security area (z.B. CISSP) are considered as advantage • Experience as consultant in IT-Security / PKI • Solid knowledge in Cryptography, PKI, X.509Michael Bailey International is acting as an Employment Business in relation to this vacancy.