Apply for our newly opened role in our growing PKI/Crypto Engineering team in Budapest!
The purpose of this role is to architect, develop and engineer emerging Cryptography, PKI, and Post-Quantum Cryptography (PQC) Capabilities, build enterprise middleware integrations using Java alongside existing team members fulfilling Citi’s Cybersecurity requirements, policies, and standards at all times.
You will be working with the best-in-class engineering team and will develop large-scale enterprise security solutions using advancements in quantum-resistant architectures with an opportunity to work with advanced mathematical primitives.
This is a Developer role with strong hands-on experience in Public Key Infrastructure, Network Security, Certificate based Remote Attestation (may include confidential computing) and Linux systems.
You will lead initiatives on emerging technology and the exciting area of next-generation quantum-safe security ecosystems.
The job will also involve working with advancing cloud designs using well-architected frameworks and is generally known to provide good job satisfaction for the right candidate meeting our Citi and team culture fitness requirements.
Responsibilities:
Architect and develop solutions at the enterprise level, which will include working on cryptographic architectures with main focus on advancing the PKI & certificate lifecycle management engineering & automation landscape.
Work with all disciplines, senior architects, and operational product owners to integrate quantum-resilient PKI, hybrid certificate architectures, and certificate management technologies with Citi platforms to protect and manage the cryptography of mission-critical systems.
Perform product evaluation, testing, benchmarking, and certification of PKI, and HSM cryptographic technologies. Ensure that all security products meet or exceed Citi Standard requirements .
Provide occasional 4th level support and technical leadership for the product toolset.
Produce high-level and low-level architectural documentation of processes, procedures, and migration roadmaps for the usage of cryptographic products.
Follow the Technology Development Life Cycle in the development of all security tools.
Qualifications:
6-10 years relevant experience in working with PKI and CLM engineering (Ops and Cloud Coordinators please excuse)
Advanced understanding of Microsoft Windows operating systems and Linux / Unix environments
Deep understanding of cryptographic protocols (TLS 1.3 hybrid key exchange, mTLS, SSH, IPsec) and X.509 standards
Strong Object-Oriented Programming Experience with hands-on Java development (Java 17/21, Spring Boot)
Programming in Python and C#
Fluency in English
In-depth knowledge and hands-on usage of Crypto Libraries (Bouncy Castle PQC APIs, OpenSSL / liboqs, JCA/JCE providers)
Sound security engineering principles as background to understanding the inner workings of the Email Security, User Certs, Device Certs, Smart Hub and Wifi system certs, Standalone device certs , its automated lifecycle, and controls that form an enterprise security ecosystem
Good familiarity with NIST 800-57 part 1 rev 6 and NIST IR 8547
Cloud Key Management and Infrastructure (AWS KMS/CloudHSM, GCP KMS/EKM, Azure Key Vault, Terraform/CloudFormation)
Must be familiar with information security concepts
A sound knowledge of secure development technologies, object-oriented programming, and shift-left security practices is required.
Education :
Bachelor’s degree/University degree
Master’s degree preferred
What we can offer:
By joining Citi Hungary, you will not only be part of a business casual workplace with a hybrid working model (up to 2 days working at home per week), but also receive a competitive compensation package and enjoy a whole host of additional benefits that support you (and your family) to be well, live well and save well:
Cafeteria Program
Home Office Allowance (for colleagues working in hybrid work models)
Paid Parental Leave Program…