Senior PKI Engineer (Hybrid or Remote Work Schedule)

JOB DESCRIPTION

At Freddie Mac, you will do important work to build a better housing finance system and you’ll be part of a team helping to make homeownership and rental housing more accessible and affordable across the nation.

Job Summary :

As a Senior PKI Engineer, you will be joining Freddie Mac’s Data Protection / Applied Cryptography team to serve a crucial role of managing, securing, engineering and governing our organization's key and certificate management services, including supporting robust, enterprise-grade Public Key Infrastructure (PKI), certificate lifecycle management (CLCM), infrastructure automation and credential management (CMS) systems.

Your expertise in developing, implementing, and maintaining PKI solutions will be key to ensuring the integrity and reliability of our digital communications and transactions!

Our Impact :

Our team is a dynamic, hard-working team that is tasked with providing cryptography expertise to the firm, including encryption (at-rest and in-transit) and key management services.

Your Impact :

Support of Design, Build and Operations

Change Agent

Technology Leadership

Qualifications :

Bachelor’s degree in information technology, engineering, computer science, related field or equivalent experience.

5+ years of experience in PKI, IT security, or related roles, with a strong focus on EJBCA and AppViewX.

Deep understanding of cryptographic protocols and algorithms.

Proficiency with EJBCA Certificate Authority.

Proficiency in automating PKI tasks using AppViewX.

Familiarity with industry standards such as X.509, PKCS, and others.

Preferred Qualifications :

Scripting Skills (Bash & / or Python) : Proficiency in scripting with Bash and / or Python. Capable of writing and maintaining scripts for automating routine PKI tasks, enhancing operational efficiency, and reducing manual errors.

Experience with one or more Credential Management Systems (CMS) with experience integrating with all facets of certificate lifecycle.

Monitoring Expertise : Experience with monitoring tools and technologies. Skilled in setting up and managing systems to monitor the health and performance of the PKI infrastructure, ensuring high availability and proactive issue resolution.

Automation Abilities : Demonstrated experience in automating IT processes. Ability to implement automation solutions that streamline PKI operations and improve system reliability and security.

Splunk Proficiency : Knowledge of Splunk for log management and analysis. Capable of leveraging Splunk to gain insights into PKI system operations and security, enhancing situational awareness and decision-making.

Kibana Experience : Experience with Kibana for data visualization. Skilled in using Kibana to create dashboards and visualizations that help in monitoring and analyzing PKI infrastructure performance and security metrics.

TLS v1.3 Protocol Expertise : In-depth knowledge and experience with the TLS v1.3 protocol. Ability to configure and optimize TLS v1.

3 for secure communications, ensuring the latest security standards are met and maintained in our PKI infrastructure.

Experience supporting / securing cloud-based services and implementing AWS cryptography, encryption and key management best practices and policies.

Keys to Success in this Role :

Must be able to effectively perform both independently and collaboratively as a strong team contributor.

Strong analytical and problem-solving skills.

Excellent communication and collaboration abilities with attention to detail.

Can work to help model and mentor team members. enter text here

Current Freddie Mac employees please apply through the internal career site.

Today, Freddie Mac makes home possible for one in four home borrowers and is one of the largest sources of financing for multifamily housing.

Join our smart, creative and dedicated team and you’ll do important work for the housing finance system and make a difference in the lives of others.

We are an equal opportunity employer and value diversity and inclusion at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by applicable law.

We will ensure that individuals with differing abilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment.

Please contact us to request accommodation.