PKI / Certificate Management Specialist

Blend of technical/ planning and communication skills: KI (Public Key Infrastructure) knowledge, planning and compliance, and technical, hands-on certificate lifecycle management:

1. 5+ years of experience in IT industry with practical experience in PKI area

• public vs. private CA Knowledge: understanding the differences between trust chains, root certificates, and issuance policies for public (CA/B Forum regulated) vs. internal (Private PKI) Certificate Authorities
• understanding of TLS: knowledge of the TLS handshake, particularly mutual TLS (mTLS) and how client certificates are validated
• OS, infrastructure components (networks/certificates/ domains, etc) understanding.

2. Planning, Analysis and Risk

• analytical and problem-solving skills with ability to navigate complex technical environments, organizational dynamics, and regulatory requirements
• planning skills to prevent service disruptions
• assessing and proposing mitigations for risks
• skills for assessing the technical solutions, data files analysis.

3. Communication

• clearly formulate objectives and content, both verbally and in writing/ presentations, for versatile Nordea audience involved: applications contacts, other technical teams, as well as the management
• strong team player with "I can solve it" attitude.

✔️ Nice-to-have knowledge and experience:

• Other cryptographic algorithms, key types and the systems for their key management.

,[Driving and implementing in Bank the global industry mandate with respect to Client Authentication EKU removal from TLS public certificates., implementation of solutions for inward and outward facing trust, communication/ support/ trainings for application teams and bank’s other areas as necessary, Discovery of various digital certificates in Bank:, analysis of tools - both internal, currently used in Bank, as well as external, which could be used for discovery, analysis of discovered certificates (i.e: types/ non-compliances, remediations proposal)] Requirements: PKI, TLS