Platform Security Engineer

Job DescriptionWe are looking for a highly skilledPlatform Security Engineerwith strong expertise inPublic Key Infrastructure (PKI),Digital Certificates,Hardware Security Modules (HSMs), andCryptographyto join our growing Platform Security team.The successful candidate will play a key role in designing, implementing, and managing security services that underpin our enterprise infrastructure and applications, ensuring trust, integrity, and compliance across our platforms.Key ResponsibilitiesDesign, deploy, and managePKI services, including root and subordinate Certificate Authorities (CAs)Oversee the lifecycle ofdigital certificates(issuance, renewal, revocation, automation) managing theCLM solutionof the GroupAdminister and maintainHardware Security Modules (HSMs), ensuring secure key storage and operationsSupport the management ofcryptographic solutions(symmetric/asymmetric encryption, key management, signing, hashing)Collaborate with IT, DevOps, and application teams to integrate certificate and cryptography services into enterprise platforms and applicationsDefine, enforce, and monitor compliance with internal security standards, industry best practices, and regulatory requirements (e.g., DORA, eIDAS, NIST, ISO *****)Support audits and security assessments by providing evidence, documentation, and subject matter expertiseTroubleshoot PKI, certificate, and cryptographic issues across multiple environmentsResearch and evaluate emerging cryptographic technologies, standards, and trendsDevelop automation scripts and workflows to streamline PKI and certificate managementRequirementsOur ideal candidate will meet the following requirements:Bachelor's degree in Computer Science, Information Security, or related field (or equivalent professional experience)Proven experience withPKI design, deployment, and operationsin enterprise environmentsHands-on expertise withdigital certificates management(SSL/TLS, client authentication, code signing, device certificates)Experience withHSM administrationand key management best practicesStrong knowledge ofcryptography principles(RSA, ECC, AES, SHA, TLS protocols, key exchange mechanisms)Familiarity withautomation and scripting(e.g., PowerShell, Python, Bash) for certificate lifecycle managementSolid understanding ofsecurity frameworks and compliance standards(DORA, NIST, ISO, PCI DSS, eIDAS)Strong troubleshooting, problem-solving, and analytical skillsExcellent communication skills and ability to work collaboratively across teamsNice to haveExperience withcloud-native PKI and certificate management servicesProficient inSecOpsandDevSecOps, integrating cryptographic services into security monitoring, incident response, and CI/CD pipelines, including PKI, certificate management, and cryptographic controlsKnowledge ofDevOps and CI/CD environmentswith certificate automation (e.g., HashiCorp Vault, cert-manager, ACME/Let's Encrypt)Certifications such asCISSP, CISM, CCSP, Microsoft Certified: Security, Compliance, and Identity, or vendor-specific PKI/HSM certificationsFamiliarity withzero trust architecturesand secure identity managementCompany ProfileGenerali is a major player in the global insurance industry - a strategic and highly important sector for the growth, development and welfare of modern societies.Over almost 200 years, we have built a multinational Group that is present in more than 60 countries, with 470 companies and nearly 80,000 employees.GOSP - Generali Operations Service Platform is a joint-venture between Generali and Accenture and provides IT and Procurement services to Generali Group companies.Our purpose is to accelerate the Group's innovation and digitization strategy through the Cloud and shared platforms.Based in Italy it has 6 branches across Europe and employs about ***** people.#J-*****-Ljbffr