The Cybersecurity PKI Systems Administrator will provide services to assist and support UNICC and its partners in maintaining and implementing Public Key Infrastructure (PKI) & Cryptography solutions. The incumbent will collaborate with other operations teams to manage certificates, encryption keys, authentications, authorizations, and related activities. Services will be provided to partner organizations either independently or under guidance, depending on the size and complexity of the client organization.
Objectives of the Programme
The objective of the Centre is to provide trusted ICT services and digital business solutions to its Clients and Partner Organizations.
Main duties and responsibilities
The incumbent will work under the supervision of the Cybersecurity PKI Officer within the Cybersecurity Engineering Unit (CSE) and collaborate closely with other CS Teams. Tasks include:
* Support setup and configuration of PKI systems in mixed and hybrid environments.
* Implement automation for distributing digital certificates during user onboarding and offboarding.
* Assist in configuring and maintaining physical and virtualized infrastructure, ensuring secure connections.
* Help deploy and manage multi-factor authentication solutions, including certificate-based methods.
* Create and update documentation related to business continuity processes.
* Support enforcement of security measures based on best practices and zero trust principles.
* Assist in backups of security solutions following policies and procedures.
* Support audits by compiling and presenting PKI, Cryptography, and MFA solutions status.
* Provide on-call support for 24×7 cybersecurity needs.
* Participate in special projects and provide ad hoc support across teams as needed.
* Support may be required outside regular hours, including weekends and holidays, on a rotation basis.
Recruitment Profile
Experience and Skills required
* Minimum five (5) years in areas such as certificate-based authentication, encryption, signature, data protection solutions, HSM deployment, PKI solutions (e.g., EJBCA, Azure, Dogtag, OpenXPKI).
* University degree from an accredited institution (considered as work experience).
* Strong understanding of Federation Protocols (OAuth, SAML, OpenID) and SSO models.
* Experience with key ceremonies, quorum rotation, and responsibility transfer.
* Proficiency in scripting languages (PowerShell, Python) for automation.
* In-depth knowledge of EJBCA and HSMs.
* Project management skills and ability to handle multiple projects under strict timelines.
* Experience with security incident response, ServiceNow, Cloud WAF, and DDoS protection.
* PowerShell expertise in automating PKI solutions enrollment.
Education
Secondary school education or equivalent, supplemented by specialized IT training. Completion of KeyFactor University Courses is advantageous.
Languages
Expert knowledge required; knowledge of the local language of the Duty Station is an advantage.
Teamwork
Ability to develop effective relationships with colleagues and handle conflicts constructively.
Communication
Ability to express oneself clearly in communication.
#J-18808-Ljbffr