PKI / Certificate Management Specialist

Lumicode Sp. z o.o. is part of the Pentacomp Group, a producer of IT solutions and provider of professional IT services for large enterprises and the public sector. Pentacomp has nearly 30 years of market presence and many completed projects.

• Knowledge of differences between public and private CAs, including trust chains, root certificates, and certificate issuance policies
• Understanding regulations and standards related to public CAs, including the CA/B Forum area
• Good knowledge of the TLS protocol, especially TLS handshake, mTLS, and client certificate validation
• Knowledge of operating systems and infrastructure components such as networks, certificates, and domains
• Experience in analyzing and managing digital certificates
• Knowledge of cryptographic algorithms, key types, and key management systems
• Ability to work in a complex technical and organizational environment
• Very good analytical and problem-solving skills
• Ability to assess risk and propose mitigating actions
• 5 years of experience in a similar position
• Languages: Polish, English

• Supporting the implementation of global requirements regarding the removal of Client Authentication EKU from public TLS certificates
• Analyzing and organizing the area of digital certificates used in the bank
• Identifying certificates, their types, potential inconsistencies, and necessary corrective actions
• Analyzing tools for detecting and managing certificates, both internal and external
• Supporting application teams regarding changes related to certificates and TLS
• Preparing technical recommendations and proposals for risk mitigation