Job Description

:Essential Duties, Responsibilities:\xc2\xb7 Experience with HSM (Hardware Security Module) likes Thales or Cloud HSM\xc2\xb7 Assist in the maintenance and support all Enterprise PKI technology, includingo Symantec MPKI.o Microsoft Certificate Services.\xc2\xb7 Knowledge and experience in Security areas such as cryptography, PKI, Code Signing, HSM, SSL / TLS, TPM, Windows security.\xc2\xb7 Manage and grow existing public and private Certificate of Authorities.\xc2\xb7 Support PKI rollouts to new Accounts/Projects and merge PKI infrastructures to our enterprise systems.\xc2\xb7 Administer the PKI certificate lifecycle for various solutions.\xc2\xb7 Evaluate upgrades and new products in a lab environment for the enterprise PKI infrastructure.\xc2\xb7 Propose and implement improvements to PKI in accordance with standard procedures and change control policies and procedures.\xc2\xb7 Participate in projects to deploy new PKI applications and services\xc2\xb7 Assist in the development of PKI or authentication solutions using Scripts (such as PERL, JAVA, PowerShell etc.) as per requirement.\xc2\xb7 Implement all changes to the PKI infrastructure in accordance with standard procedures and change control policies and procedures.\xc2\xb7 Work supporting various application owners and their needs as in pertains to PKI and implementation of certificates.\xc2\xb7 Provide documentation and training to IT extended teams (Services Desk, Desktop Services, Desktop Engineering, Directory Services, and Messaging).\xc2\xb7 Work with Technical Writers to maintain PKI online resources.Skills:Demonstrated knowledge in systems administration (Required)\xc2\xb7 Windows 20xx Server\xc2\xb7 Linux\xc2\xb7 Microsoft Active Directory (Including Active Directory Certification Services)\xc2\xb7 GPOs (Global Policy Objects)\xc2\xb7 Domain membership and authentication\xc2\xb7 Internet Information Service (IIS)\xc2\xb7 DNS\xc2\xb7 Server hardening & security

• Familiarity with development environments (anyone is minimum required)

Perl, Java, PowerShell, Python

• Familiarity with x.509 digital certificates (Desired)

o Windows\xc2\xb7 Certificate storage (User vs. Machine)\xc2\xb7 CSPo Apple OS X\xc2\xb7 Certificate storage (e.g. Keychain)o Java Keystoreo Command-line tools (e.g. certtool, security, openssl, etc.)o Certificate Fieldso Certificate Usage\xc2\xb7 Client Authentication\xc2\xb7 Signing\xc2\xb7 Encryption

• S/MIME

• EFS

\xc2\xb7 Revocation (CRL & OCSP)\xc2\xb7 Validity checkingo Microsoft Certificate ServicesCertificate Templates\xc2\xb7 Auto enrollment\xc2\xb7 Manual enrollment\xc2\xb7 User and machine certsRecruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available .

DXC Technology