Lead Infrastructure and Platform Engineer

• Work on defining strategy, design, deployment automated management of Nomura s Certificate PKI management infra in close alignment support of the overall IT Strategy

Role scope involves

1. Define Certificate Strategy and Road Map for internal / external Certificate Management within Nomura
2. Requirement gathering, framing analysis,
3. Evaluation certification of relevant vendor products
4. Enterprise-scale design (build, test validate)
5. Detailed design, product operational documentation
6. Integration into the banks core platforms and eco-systems
7. Ensure Production deployment at enterprise scale, working in close collaboration with relevant operational counterparts
8. Automation of Certificate Life Cycle Management

• Lead role in defining Certificate Strategy in collaboration with Technical Domain Owner for both internal and external certificates.

• Ensure successful delivery of all relevant projects and initiatives, working in close collaboration with other Engineering team members Operational teams globally

• Drive the development implementation of automation solutions, tooling and which provide for a controlled secure framework for automation of the various tasks for this domain e.g.: issuance, renewal, and revocation of digital certificates, SSL Tests, Self -Service frameworks etc.

• Collaborate with relevant vendors as required for product evaluation and functionality mapping to cater to Nomura s certificate management requirements

• Facilitate the adoption of emerging technologies and industry trends standards in the Certificate management domain.
• Assist in developing engineering and operational service metrics with actionable plans to improve operational efficiency, enhance service quality/SLA, and optimize delivery.

• 8-12 years of hands-on experience in a role responsible for engineering PKI platforms. Experience should include CA Server operations, CRL publishing, Certificate templates management, Certificate Lifecycle management etc.
• Design Implementation of Enterprise PKI solutions
• Should have an Automation firstmind-set. Proven experience on automation of certificate management functions such as certificate installation, certificate revocation, automated tests etc.
• Strong understanding of the systems development life cycle methodology
• Ability to communicate effectively with team members, stakeholders, and management
• Ability to work well as part of a global team, and on their own when required
• Experience on working on projects i.e., requirements gathering, analysis, scoping, design, testing , validation, operational handover and Production roll-out

• 8-12 years of hands-on experience in a role responsible for engineering PKI platforms. Experience should include CA Server operations, CRL publishing, Certificate templates management, Certificate Lifecycle management etc.
• Design Implementation of Enterprise PKI solutions
• Should have an Automation firstmind-set. Proven experience on automation of certificate management functions such as certificate installation, certificate revocation, automated tests etc.
• Strong understanding of the systems development life cycle methodology
• Ability to communicate effectively with team members, stakeholders, and management
• Ability to work well as part of a global team, and on their own when required
• Experience on working on projects i.e., requirements gathering, analysis, scoping, design, testing , validation, operational handover and Production roll-out

• Subject matter expert of digital certificate technology that includes all tiers in Certificate Authority (CA) hierarchy. This includes PKI infra setup, Certificate Management, CA Server operations, CRL publishing, Certificate templates management, Certificate Lifecycle Management etc.
• Strong proficiency in cryptography and usage of Private and Public key concepts including asymmetric key cryptography, X.509 standards, PKCS standards etc.
• Experience in developing Certificate Management process / procedure SOP
• Strong understanding of SSH, SSL, and PRI protocols and procedures.
• Strong understanding of Security concepts (data security application security)
• Proficiency in automation using tooling scripting. Ansible/ Python combination is preferable
• Knowledge of operating system fundamentals including diagnostics, tuning and monitoring of IO, Networks, CPU and Memory
• Good understanding of Core services such as LDAP, DNS etc.
• Good understanding of Cloud concepts and pubic cloud platforms
• Good understanding of Network fundamentals
• An industry recognized engineering and security certifications will be an advantage: CISSP, CISA, ISO27001, MCSE, RHCE, CCNE, CCSE
• Security/Authentication systems - Kerberos, eTrust/PKI

• Strong sense of ownership and commitment
• Own drive all mapped tasks projects to successful completion in a time-bound manner
• Able to work both independently and collaboratively as part of a wider project team, as required.
• Strong communication skills (presentation, documentation etc.). Should be able to articulate technology solutions, roadmaps etc. to a global audience and stakeholders.
• Self-motivated and keen to learn and develop. Should be open to pick up and learn new skillsets as well be open to lateral move across technology platforms within Engineering. Nomura s Engineering objective is a multi-skilled and multi-technology experienced team
• Be able to work on multiple projects in parallel with appropriate prioritization