Principal PKI Engineer


Your role will be to function as a Principal PKI Engineer responsible for the design and implementation of PKI and Cryptographic services to support DPDHL Group’s on-prem and Cloud Initiatives.

Your tasks:

• Support the PKI and Cryptographic Services team in the delivery of properly engineered PKI and Cryptographic services, including the management of change and the maintenance of professional and ethical standards in this area.
• Implement Public Key Infrastructure (PKI) core and peripheral components according to customer requirements, industry best practices and latest security standards
• Act as principal expert for Encryption and Tokenization related topics
• Provide 4th level support for all issues related to the service
• Translate business requests into technical and executable actions.
• Preparation and updating of service related architecture and design documentation
• Generating service related Proof of Concepts (PoC)
• Provide technical leadership and guidance to colleagues in designated area of expertise
• Provide project support, technical consultancy and implementation planning
• Promote and actively research the PKI, Encryption and Tokenization technology space, identifying technologies and products consistent with global standards that can provide commercial and security benefit to the organization
• Responsible for recommending new PKI and Cryptographic services and subsequent implementation, ensuring minimum disruption and impact to the business

Your skills:

• 4+ years of experience in the field of System Administration, Security, Encryption or Tokenization
• Very good knowledge of Windows Server, AD, ADCS, GPOs, Failover Clustering
• Strong analytical skills
• Very good understanding of TLS/SSL
• Ability to get quickly from problem to solution
• Very good understanding of Cryptography (Symmetric/Asymmetric encryption and Digital Signature)
• Very good knowledge in Public Key Infrastructure area, Digital Certificates, Certification Authorities
• Advanced English
• Good knowledge of Enterprise Key Management system and its integration with technology platforms (e.g. Databases, VMs, applications)
• Scripting/Programming (PowerShell, C#) is a plus
• Azure Cloud experience/knowledge is a plus

We offer:

• Great team of IT professionals
• Modern offices in Chodov
• Home office possibilities
• Permanent contract
• Company Car
• CAFETERIA employee benefit program with wide selection of benefits from Edenred
• Extra week of holiday (25 days/year), 6 Self-sickness days/year, Full salary compensation for up to 10 days absence due to illness per calendar year, Lunch vouchers fully covered by the employer
• Multisport card, mobile and laptop, fruit days, sport clubs for employees, Referral program……
• Pension plan contribution, Long term sickness Insurance

In accordance with the legitimate interest of DHL IT Services, the candidate for this role shall provide a copy of his/her extract from criminal record.

This role may not be performed if the criminal record confirms that the employee has been lawfully convicted for the criminal offence:
• against property;
• in the area of processing of personal data and/ or breach of secrecy of correspondence;
• any other criminal offence connected with the terrorism.

The submitted extract of criminal record may not be older than 3 months as of the day of its submission.


Marie Nunhardtová
Marie Nunhardtová
DHL Information Services (Europe) s.r.o.

At DHL ITS, I am responsible for Production Services department recruitment. Usually I am recruiting the roles such as Application Specialist, Support Specialist and Network Engineer.


Nastavení cookies