IT Security Engineer - PKI and HSM 80 - 100% (f/m/d)

Tasks

• Design, implementation, and operational governance of the enterprise public key infrastructure (PKI) to ensure trusted digital certificates and secure cryptographic services across global systems and networks.
• Technical co-owner of the Hardware Security Module (HSM) environment to protect cryptographic keys and enable secure key generation, storage, and digital signing operations.
• Deployment and integration of PKI and HSM with strategic platforms such as SSL/TLS offloading, PKI/payment, production data (tape) encryption, code signing systems, and secure file transfer solutions.
• Lead the response to complex incidents to ensure a Tier 2/Tier 3 escalation point through outstanding technical skills and management of preventive controls to strengthen service resilience.
• Ensuring the entire lifecycle of the PKI platform complies with the company's information security policies, regulatory framework, and internal audit requirements, including strict control over access permissions and cryptographic material.

Requirements

• Expertise in public key infrastructure (PKI) operations, including hands-on experience with Microsoft Active Directory Certificate Services (AD CS) or other X.509-compliant CA platforms.
• Technical expertise in various IT functions, both regionally and globally.
• At least 2-3 years of experience in 2nd and 3rd line engineering or operations roles supporting enterprise-grade PKI/HSM technologies, ideally in complex, highly regulated environments, with a bachelor's degree or related qualification.
• Relevant academic background (e.g., bachelor's or master's degree in computer science, information security, or a related discipline) or equivalent practical experience.
• Industry certifications such as CISSP, CISM, or CISM are a strong advantage.

We offer

• The opportunity to work in a global team.
• The opportunity to develop in a complex and highly regulated environment.