**Purpose of the Position**
The Cybersecurity PKI Systems Administrator will provide services to assist and support UNICC and its partners in maintaining and implementing Public Key Infrastructure (PKI) & Cryptography solutions and collaborate with other operations team in managing certificates, encryption keys, authentications, authorization, and similar activities. The incumbent will provide services to partner organizations either independently or through guidance on PKI specialist, depending on size and complexity of client organization and related needs.
**Objectives of the Programme**
The objective of the Centre is to provide trusted ICT services and digital business solutions to its Clients and Partner Organizations.
**Main duties and responsibilities**:
The incumbent will work under the direct supervision and guidance of the Cybersecurity PKI Officer within the Cybersecurity Engineering Unit (CSE) in the Cybersecurity Division (CS) and will be in close collaboration with other CS Teams. The incumbent could be requested to do any other tasks of similar level in related fields. The postholder will work on the following tasks:
- Support the setup and configuration of Public Key Infrastructure (PKI) systems, following predefined guidelines and standards in mixed and hybrid environments
- Help implement automation processes for distributing digital certificates as part of the user onboarding and offboarding process, under the guidance of senior staff
- Assist in configuring and maintaining both physical and virtualized infrastructure; ensuring secure connections according to established best practices
- Under guidance of a senior staff, assist in the deployment and management of multi-factor authentication solutions, including certificate-based and non-certificate-based methods
- Help create and update documentation related to business continuity, ensuring all processes are clearly recorded and easily accessible
- Follow established best practices and the zero trust principle to support the enforcement of security measures related to organizational certificate usage
- Following the organization’s agreed-upon policies and procedures, assist in administering backups of various security solutions
- Provide assistance during internal and external audits by helping to compile and present the current status of PKI, Cryptography, and MFA solutions within the organization
- Provide oncall services to support the 24×7 cybersecurity service needs
**Other**:
- Provide other ad hoc support either within the team or in other teams as required - this includes the participation in special projects or support to service delivery for short period of time on a part-time or full
- time basis upon request from the senior management
- The incumbent may be requested to provide support during weekends, holidays or outside working hours as well as to serve as a “stand-by” officer on a rotation basis
Recruitment Profile
**Experience and Skills required**:
**Essential**:
- At least five (5) years of experience in one or more of the following areas:
- Certificate-based authentication, encryption, signature, and related usages onto data protection solutions field
- Deployment and management of Hardware Security Modules
- Deployment and configuration of PKI solutions, including and not limited to EJBCA®, Azure®, Dogtag®, OpenXPKI
- A completed university degree from an accredited institution will be counted towards minimum work experience requirements
- Strong understanding with Federation Protocols (Oauth, SAML, OpenID), and Single Sign On (SSO) models
- Strong understanding of key ceremony process and its documentation Experience with managing quorum rotation and transfer of responsibility
- Proficiency in scripting languages (e.g., PowerShell, Python) to automate routine tasks, streamline processes, and perform bulk operations for directory services
- In-depth knowledge of EJBCA® usage together with HSMs
- Experience with Entrust®, Sectigo®, RSA®, CloudFlare®, KeyFactor®, Thales®, and Microsoft® products
**Desirable**:
- Project management skills and ability to work on multiple projects under strict timelines
- Experience with security incident response and management process relying on ServiceNow®
- Experience and understanding of Cloud WAF and DDOS protection
- PowerShell knowledge with proved experience in automating auto
- enrolment for customized PKI solutions
**Education**:
**Essential**:
- Successful completion of secondary school education or its equivalent, supplemented by specialized training in IT
**Desirable**:
- KeyFactor® University Courses Completion
**Languages**:
- **English**: Expert knowledge is required
- Knowledge of the local language of the Duty Station will be an advantage
**UNICC Integral Competencies**:
- **Teamwork**:Develops and promotes effective relationships with colleagues and team members. Deals constructively with conflicts.
- **Communicating**:Expresses oneself clearly in conv