PKI Engineer - Advanced Cryptographic Security (PQC)

Apply for our newly opened role in our growing PKI/Crypto Engineering team in Budapest!

The purpose of this role is to architect, develop and engineer emerging Cryptography, PKI, and Post-Quantum Cryptography (PQC) Capabilities, build enterprise middleware integrations using Java alongside existing team members fulfilling Citi’s Cybersecurity requirements, policies, and standards at all times.

You will be working with the best-in-class engineering team and will develop large-scale enterprise security solutions using advancements in quantum-resistant architectures with an opportunity to work with advanced mathematical primitives.

This is a Developer role with strong hands-on experience in Public Key Infrastructure, Network Security, Certificate based Remote Attestation (may include confidential computing) and Linux systems.

You will lead initiatives on emerging technology and the exciting area of next-generation quantum-safe security ecosystems.

The job will also involve working with advancing cloud designs using well-architected frameworks and is generally known to provide good job satisfaction for the right candidate meeting our Citi and team culture fitness requirements. 

Responsibilities:

• Architect and develop solutions at the enterprise level, which will include working on cryptographic architectures with main focus on advancing the PKI & certificate lifecycle management engineering & automation landscape.

• Work with all disciplines, senior architects, and operational product owners to integrate quantum-resilient PKI, hybrid certificate architectures, and certificate management technologies with Citi platforms to protect and manage the cryptography of mission-critical systems.

• Perform product evaluation, testing, benchmarking, and certification of PKI, and HSM cryptographic technologies. Ensure that all security products meet or exceed Citi Standard requirements .

• Provide occasional 4th level support and technical leadership for the product toolset.

• Produce high-level and low-level architectural documentation of processes, procedures, and migration roadmaps for the usage of cryptographic products.

• Follow the Technology Development Life Cycle in the development of all security tools.

Qualifications:

• 6-10 years relevant experience in working with PKI and CLM engineering (Ops and Cloud Coordinators please excuse)

• Advanced understanding of Microsoft Windows operating systems and Linux / Unix environments

• Deep understanding of cryptographic protocols (TLS 1.3 hybrid key exchange, mTLS, SSH, IPsec) and X.509 standards

• Strong Object-Oriented Programming Experience with hands-on Java development (Java 17/21, Spring Boot)

• Programming in Python and C#
• Fluency in English

• In-depth knowledge and hands-on usage of Crypto Libraries (Bouncy Castle PQC APIs, OpenSSL / liboqs, JCA/JCE providers)

• Sound security engineering principles as background to understanding the inner workings of the Email Security, User Certs, Device Certs, Smart Hub and Wifi system certs, Standalone device certs , its automated lifecycle, and controls that form an enterprise security ecosystem

• Good familiarity with NIST 800-57 part 1 rev 6 and NIST IR 8547

• Cloud Key Management and Infrastructure (AWS KMS/CloudHSM, GCP KMS/EKM, Azure Key Vault, Terraform/CloudFormation)
• Must be familiar with information security concepts

• A sound knowledge of secure development technologies, object-oriented programming, and shift-left security practices is required.

Education:

• Bachelor’s degree/University degree
• Master’s degree preferred

What we can offer:

By joining Citi Hungary, you will not only be part of a business casual workplace with a hybrid working model (up to 2 days working at home per week), but also receive a competitive compensation package and enjoy a whole host of additional benefits that support you (and your family) to be well, live well and save well:

• Cafeteria Program
• Home Office Allowance (for colleagues working in hybrid work models)
• Paid Parental Leave Program (maternity and paternity leave)
• Private Medical Care Program and onsite medical rooms at our offices
• Pension Plan Contribution to voluntary pension fund
• Group Life Insurance
• Employee Assistance Program
• Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed
• Flexible work arrangements to support you in managing work - life balance
• Career progression opportunities across geographies and business lines
• Socially active employee communities with diverse networking opportunities

Alongside these benefits Citi is committed to ensuring our workplace is where everyone feels comfortable coming to work as their whole self every day. We want the best talent around the world to be energized to join us, motivated to stay, and empowered to thrive.

#LI -OD1

------------------------------------------------------

------------------------------------------------------

------------------------------------------------------

------------------------------------------------------

------------------------------------------------------

------------------------------------------------------

------------------------------------------------------

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.
View Citi’s EEO Policy Statement and the Know Your Rights poster.