The purpose of this role is to design, develop and engineer Cryptographic, PKI and symmetric key and Certificate management Systems alongside existing engineering team members fulfilling corporate requirements, policies and standards.
The candidate will take part in defining cryptographic standards, architectures, and governance, and help develop Citi's next generation crypto ecosystem, a large scale enterprise security solutions using the latest advancements in cryptography and information security and advanced algorithms.

Certificate management engineering, focused on automated certificate management, deployment, renewal in various clients, applications operating systems; cryptographic protocols and controls, including but not limited to, post-quantum cryptography, PKI solutions, and strategic vendor interaction.

The candidate's responsibilities will also include working with advanced mathematical algorithms within PKI. The engineer will participant in PKI, device and user certificate management focusing on certificate lifecycle automation projects in Citi, including certificate automation for microservices, desktops, servers, windows/unix hosts, network security devices and other appliances.

Responsibilities:

• The candidate's primary responsibility will be to research cryptographic protocols, develop crypto solutions at the enterprise level, which will include working on PKI architectures with a strong focus on certificate management automation.
• The candidate must have experience with PKI and an good understanding of cryptography, including the principles related to PKI, private keys, encryption methods, CRL, and advanced key usages.
• Strong Linux operation system and scripting background is required.
• Work with all disciplines, engineers, and operational product owners to integrate PKI, symmetric key and certificate management related technologies with Citi platforms to protect and manage the cryptography of mission critical systems.
• Perform product evaluation, testing and certification of PKI and Crypto technologies. Ensure that all security products meet or exceed Citi internal and regulatory requirements.
• Provide occasional 4th level support for the product toolset.
• Produce documentation of processes and procedures for the usage of the product.
• Follow the Technology Development Life Cycle in the development of all security tools.

Qualifications:

• 6+ years of relative experience
• Strong solid experience in cryptography, crypto protocols/algorithms and peripheral technologies is required.
• must be familiar with information security concepts, best practices and solutions.
• must have a strong development background
• Experience with commercial Certificate Authority (CA) products and/or certificate management systems is a plus.
• Working with Trust Providers is a plus.
• Understanding of Microsoft Windows and Unix operating systems
• Programming Experience in JAVA or C, and Python
• Knowledge of Crypto Libraries (example: bouncy castle)
• Sound security engineering principles as background to understanding the inner workings of the systems and controls that form an enterprise security ecosystem
• Symmetric Key Encryption
• Asymmetric Encryption
• Experience with a variety of HSM platforms

Education:

• Bachelor's degree/University degree or equivalent experience
• Master's degree preferred
• Information Security Certification(s)

Job Family Group:
Technology

Job Family:
Information Security

Time Type:

Citi is an equal opportunity and affirmative action employer.

Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Citigroup Inc. and its subsidiaries ("Citi") invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View the "EEO is the Law" poster. View the EEO is the Law Supplement.

View the EEO Policy Statement.

View the Pay Transparency Posting

Effective November 1, 2021, Citi requires that all successful applicants for positions located in the United States or Puerto Rico be fully vaccinated against COVID-19 as a condition of employment and provide proof of such vaccination prior to commencement of employment.