Public Key Infrastructure

Public Key Infrastructure (PKI) Specialist:

Job Specification:

Maersk is a $30bn organization with 100,000 people that move 20% of the world's trade, and the largest shipping and logistics company in the world and we are transforming our company into a global integrator of container logistics. We are offering you a unique opportunity to help shape that journey and the future organization. As a part of this process, you will have an opportunity to participate in a global IT transformation program that will set the direction of the future business model for this large global organization.

What We offer:

As an organization with a global presence, joining Maersk is a wonderful and exciting opportunity for you to work with people of diverse talents & backgrounds. We offer a fast-paced, challenging, and truly international atmosphere with activities spread around the globe in Copenhagen, London, Charlotte, and India. The environment is dynamic with a focus on high performance, results, and respect for our employees. There will be the possibility of continuous professional and personal development and for gaining a professional and social network. As a company, we are committed to growing our people. We will provide you with opportunities that broaden your knowledge and strengthen your professional & technical skills. As a Public Key Infrastructure (PKI) Specialist, you will be part of a team responsible for rolling out and integrating various solutions into our IT Landscape. You will work independently and with development teams/stakeholders in various locations, e.g. Copenhagen and the UK.

Key responsibilities:

The Public Key Infrastructure (PKI) Specialist is responsible for driving the function towards successful technical delivery, utilising various programmes and operational support to increase capability and reduce risk. Managing technical debt and technology trade-offs, communicating those to the Service Owner ensuring implementation quality and that correct procedures are in place to assure code and feature quality.

Working closely with other interdependent Engineering Managers to produce required design specifications and ensure operational solutions work together and fulfil business needs.

Working with organizational resources outside the team to remove impediments and protect them from organisational bureaucracy.

As a Public Key Infrastructure (PKI) Specialist, you will report directly to the Senior Manager of Cryptography & Directory Services with the following tasks:

• Continuous service improvement: PKI is heavily used within Maersk, and you will strive to improve its performance and health daily.
• Performing daily service checks and fulfilling request tickets for DNS & PKI.
• Responding to Incidents and Major Incidents in a timely manner to drive resolution
• Driving automation in certificate and key lifecycle management across Maersk
• The ability to extract data, generate reports which highlight where service improvements are required, and create opportunities for development and risk reduction.
• Develop or ensure documentation / code is at high standard and specification in accordance with current framework, working with the wider team and vendors to deliver.
• Build strong collaborative relationships with architects, designers, engineers, external agencies, vendor staff and partners.
• Build strong collaborative external relationships with industry experts.
• Develop scope definition, technical viability scoping and best practice solution design to meet the requirements
• Provide guidance to the Solution Architect in the development of solutions.
• Highlight all risks and issues that affect the development or deliveries
• Form strong and trusted relationship with the Product Owner; ensuring that the Product Owner is fully aware of the technical capabilities and shortcomings of the product allowing for sensible technical investment and debt repayment decisions
• Work across teams to define efficient solutions and implementation strategies to create highly cohesive implementation across products
• Share best technical practice across the team and develop others in their technical learning.
• Demonstrate interest in improving the company's technical awareness, depth and use of technology across the business.
• Participate in the evolution of company level best practices, standards, and policies related to software development.

We are looking for:

Experience & Technical Skills:

• A minimum of 5+ years' working with Public Key Infrastructure (PKI), Access Management and Identity in general
• Experience with Venafi and/or similar Certificate Lifecycle Management suite
• Experience in Key Management System (Entrust Key Control)
• Knowledge of Microsoft's Active Directory Certificate Services, implementation and its security.
• Experience Managing & configuring Hardware Security Module (HSM) technology (Thales/Entrust)
• Experience with managing Public Domain Names & External DNS Records.
• Good experience in system integration using modern technologies e.g. REST API, MS Graph API and Log Analytics API
• Automation is key You will have experience working with PKI to optimise and automate
• Highly skilled in writing clean, reusable and efficient script that is easy to read
• Deep knowledge and understanding of technology; a person who stays relevant with the latest technology advancements and trends
• Knowledge of Identity Access management solutions and protocols.
• Knowledgeable in cloud-based document management products.

Preferred skills:

Knowledge of DevOps or something similar

Knowledge of ITIL v3

Knowledge of auditing

Ways of working:

• You are passionate about PKI, authentication, authorisation and security related to identity. You keep up with new developments within the identity world.
• Understand the principles of least privileges. We never give out more permissions than required
• Understand that if something looks or feels wrong, then it probably is wrong
• Willing to take ownership of a problem, even if no one is else is willing to do so.
• Highly motivated and work well under pressure
• Willing to keep up and learn new technology and understand how they will be beneficial to Maersk if implemented.
• Be concise and to the point.
• Have excellent communication skills. You will need to explain complex solutions to other engineers, end users, developers and management and can change the level of technical language used dependent on the target audience.
• You can articulate the risk of implementing or nor implementing a solution.
• Have excellent documentation skills. This could be when you are creating documentation for other engineers within Confluence, creating LLD's / HLD's, creating end user documentation or producing a read me file within source control.
• Structured, highly analytical mindset and excellent problem-solving skills. You will need to understand complex identity and attribute flows and be able to come to root cause very quickly.
• Collaborative, with strong facilitation and people skills / personal impact
• Willing to work on new technologies and languages outside of their core skillset
• Innovative, with the ability to think outside the box
• Fact-based and result oriented
• An individual who respects the opinion of others; yet can drive a decision through the team
• An individual who understands and respects the agile method
• An individual who wants to contribute to the wider engineering community to define best practices

Leader of people:

• The ability to leads reviews of others' designs and software implementations
• The ability to engage the team to achieve goals.
• The ability to inspire fellow technical people

Maersk is committed to a diverse and inclusive workplace, and we embrace different styles of thinking. Maersk is an equal opportunities employer and welcomes applicants without regard to race, colour, gender, sex, age, religion, creed, national origin, ancestry, citizenship, marital status, sexual orientation, physical or mental disability, medical condition, pregnancy or parental leave, veteran status, gender identity, genetic information, or any other characteristic protected by applicable law. We will consider qualified applicants with criminal histories in a manner consistent with all legal requirements.

We are happy to support your need for any adjustments during the application and hiring process. If you need special assistance or an accommodation to use our website, apply for a position, or to perform a job, please contact us by emailing