Principal PKI Engineer/Developer


We are looking for new colleagues for our PKI and Cryptographic Services Team. We build/run all Public Key Infrastructure and Cryptography related services for DPDHL Group.

Your daily work:

• Development and implementation of Public Key Infrastructure (PKI) core and peripheral components according to customer requirements and latest security standards:
• Manage Microsoft Windows-based client for managing x.509 Digital certificates and stores for both User and Machine Space (.NET C#)
• Certificate Enrollment using Windows Native Enrollment APIs, SCEP and Custom HTTPS enrollment client
• Server-Side Certificate Enrollment Manager
• Maintaining MSSQL Databases (with EKM/TDE encryption)
• API development in C# and PHP
• Web frontend/backend application for Certificate Management (PHP)
• Development and implementation of Interfaces to other Services (like GlobalServiceNow or external Root Certificate Vendors using SOAP/REST)
• Preparation of service related documentation (e.g. Updates to security concepts, maintaining developments in GIT)
• Generating service related Prove of Concept (PoC)
• Working with support ticket tool GlobalServiceNow (GSN), like resolving incidents and raising changes

Your skills:

• 4+ years of experience in the field of Server Administration or Security
• Familiar with Windows Server, AD, ADCS, GPOs, Failover Clustering
• Understanding of Web APIs (REST/SOAP)
• Scripting/Programming (PowerShell, C#)
• Very good understanding of TLS/SSL
• Good understanding of Cryptography (Symmetric/Asymmetric encryption and Digital Signature)
• Knowledge in Public Key Infrastructure area, Digital Certificates, Certification Authorities
• Strong analytical skills
• Ability to get quickly from problem to solution
• Advanced English

We offer:

• Great team of IT professionals and possibility of technical development
• Modern offices in Chodov
• Home office possibilities
• Permanent contract
• Company Car, Pension plan contribution, Long-term Sickness Insurance
• CAFETERIA employee benefit program with wide selection of benefits from Edenred
• Extra week of holiday (25 days/year), 6 Self-sickness days/year, Full salary compensation for up to 10 days absence due to illness per calendar year, Lunch vouchers fully covered by company
• Multisport card, mobile and laptop, fruit days, sport clubs for employees, Referral program……

In accordance with the legitimate interest of DHL IT Services, the candidate for this role shall provide a copy of his/her extract from criminal record.

This role may not be performed if the criminal record confirms that the employee has been lawfully convicted for the criminal offence:
• against property;
• in the area of processing of personal data and/ or breach of secrecy of correspondence;
• any other criminal offence connected with the terrorism.

The submitted extract of criminal record may not be older than 3 months as of the day of its submission.


Marie Nunhardtová
Marie Nunhardtová
DHL Information Services (Europe) s.r.o.

At DHL ITS, I am responsible for Production Services department recruitment. Usually I am recruiting the roles such as Application Specialist, Support Specialist and Network Engineer.


Nastavení cookies