Job Description

Systems Engineer (senior) Switzerland Zurich Bern / long term-Contract / German Speaking fluent MUST, Public Key Infrastructure, PKI (Microsoft CA, OpenSSL, EJBCA, Venafi) HSMs LDAP, SCEP, OCSP, PowerShell, Python
Main tasks

• Design, implementation, and management of the PKI infrastructure, including Certificate Authorities (CAs), Registration Authorities (RAs), and related services.

• Management and operation of certificates for internal and external applications, devices, and users.

• Development and implementation of security policies, procedures, and best practices for the operation and management of PKI services.

• Monitoring and troubleshooting of PKI-related services, including certificate renewal and revocation.

• Integration of PKI services with enterprise applications, networks, and security solutions (e.g., VPN, SSL/TLS, email signatures).

• Implementation and management of Hardware Security Modules (HSMs) for secure key storage.

• Collaboration with security, network, and application teams to ensure compliance with security requirements.

• Development of automation solutions for certificate management and process optimization.

• Creation and maintenance of technical documentation, security policies, and operations manuals.

• Training and support of internal teams on PKI-related topics.

Required skills

• Completed studies in computer science, information technology, cybersecurity, or a comparable qualification.

• Several years of experience in implementing and managing PKI solutions in corporate environments.

• In-depth knowledge of encryption technologies, certificate services (SSL/TLS), digital signatures, and key management.

• Experience with PKI software solutions (Microsoft CA, OpenSSL, EJBCA, Venafi) and HSMs.

• Knowledge of automating PKI processes using PowerShell, Python, or similar scripting languages.

• Strong understanding of network security architectures and authentication protocols (e.g., LDAP, SCEP, OCSP).

• Good problem-solving skills and analytical thinking.

• Teamwork skills, strong communication skills, and the ability to clearly communicate technical concepts.

• Candidate ideally needs to be suitable to pass security checks (ideally a resident in CH for minimum 5 years)

Education

• Certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Microsoft Certified: Security, Compliance, and Identity Fundamentals, or similar.

• Experience managing hybrid environments (on-premises and cloud).

Please apply with your most up to date CV if you are interested

• Seniority Level

Mid-Senior level

• Industry

• IT Services and IT Consulting
• Employment Type

Contract

• Job Functions

• Engineering
• Design
• Other
• Skills

• Powershell
• Digital Authentication
• LDAP
• Troubleshooting
• Hardware Security
• Domain Name System (DNS)
• Python (Programming Language)
• PKI
• Computer Science