Pki Solution Architect

**Overview of business area or project**:
Credit Suisse has commenced a journey to modernize its Security Posture across multiply domains: Data Protection, Endpoint Protection, Mobile Security, modern authentication, and many others. To support such modern initiative certificate management system / Public Key Infrastructure (PKI) plays very critical role. This role will help rearchitect Credit Suisse PKI as per modern use case requirement. Shape the overall strategy and future architecture and will support the engineering teams across on-prem and the Cloud, as well as diverse geographies and regulatory markets. This is a technical role with some leadership skills working with domain architects and engineers to deliver new solutions that work for the bank.

**Key Responsibilities**:

- As a PKI Solution Architect, you will be involved in the assessment of existing PKI infrastructure. Identifying gap and risk and provide recommendations as per industry best practices.
- Rearchitecting PKI infrastructure to meet the modern use case. Such as autoenrollment, PKI server placement across geographical location, public cloud integration and similar other modern use cases.
- Ensuring PKI infrastructure is following industry best practices.
- Your key responsibilities include developing the Program Architecture to producing consistent and high-quality service roadmaps and architectures, ensuring strategy alignment and oversight of standards and guidelines. You will work closely with the technical domain architects and engineers to develop and agree the target state and transitional states.
- You are accountable for the architectural oversight of all areas of your assignee.
- As a solution architect you will participate in use case and requirements analysis, architecture state definition (target/interim), technology evaluation and strategy decision, architecture reviews, as well as identification of improvement opportunities and architecture support for department program/projects.
- You will align and also collaborate with our centralized IT Strategy and Architecture teams, as well as Business Divisions on dependencies across technical domains and service areas.
- You will increase the engagement of the architecture team, architecture community both within GCIO and within the divisions, actively engage in strategic projects and this will be ultimately reflected in increased customer engagement and drive higher value from the use of CSO services
- You will be a member of the CSO and other global CIO Design Authorities - representing CSO at those boards to ensure that the right decisions are taken in full context, dependencies are professionally managed and appropriate socialization of key decisions takes place

**Essentials Skills and Qualifications**:

- Bachelor’s degree or Master’s degree in Software Engineering, Information Technology or related sciences field (alternatively provable equivalent education and practical experience in this domain)
- Expert level Experience in designing and architecting Enterprise Public Key Infrastructure. Populating ideas into documents such as High-Level Design (HLD) and Low Level Design (LLD)
- Expert level experience in Microsoft Certificate Management Services.
- Expert level experience in SSL certificate management concepts, processes, and solution management. Direct experience with Venafi Trust Protection Platform is highly desirable.
- Expert level experience with hardware security module (HSM) technology. Direct experience with Safenet HSM (Gemalto) platforms is highly desirable.
- Must possess solid understanding in Security Architecture and bring at least 10 years of hands-on experience in an architecture role (enterprise or domain architecture) and as a plus around 5 years of software or systems engineering experience with an outstanding understanding of modern practices and trends in Enterprise, Enabling, Cyber and IT security, technologies and frameworks. Experience in successful utilization and integration of enterprise workflow platforms a must.
- Profound knowledge of enterprise architecture practices, strategies, processes and methodologies, bringing a passion for architecture and software engineering excellence, Inc. experience in architecture modelling.
- Expert level experience with PKI implementation and certificate lifecycle management solution.
- Expert level experience in cloud solution development with Azure or AWS architectures as it related to PKI management.
- General knowledge of infrastructure, network and cloud security (with focus on cloud based KMS).
- A security industry certification is required including but not limited to CISSP, SSCP, CISM, SANS GSEC, ECSA, ECSP, and Security+

**Desired Skills and Qualifications**:

- Knowledge of Agile, Cloud, DevOps, Open Source and a programming language is of substantial advantage as well as practical experience of driving architecture good practice and encouraging creative or forward-thinking in a tradit