Manage and maintain Hardware Security Modules (HSMs), ensuring their operational integrity and security posture, including firmware updates and key lifecycle management.

Administer Public Key Infrastructure (PKI) components, such as Certificate Authorities (CAs) and Registration Authorities (RAs), to issue, renew, and revoke digital certificates.

Implement and enforce PKI policies, procedures, and best practices to maintain a robust and compliant certificate management system.

Monitor HSM and PKI infrastructure for performance, security incidents, and operational anomalies, proactively addressing identified issues.

Hands-on experience with Entrust nShield HSMs

• nShield Connect

• nShield Solo

• nShield Edge

• Strong understanding of cryptography concepts:

• Symmetric & asymmetric encryption

• RSA, ECC, AES

• Hashing (SHA-256, SHA-512)

• Digital signatures

• Key management lifecycle:

• Key generation, storage, rotation, backup, recovery, destruction

• HSM security world management:

• Security World creation

• Administrator & operator cards

• Module initialization and recovery

PKI & Integration Skills

• Experience with PKI infrastructure

• Integration of HSMs with:

• Certificate Authorities (CA)