Technical Leader Cryptographic Controls

What You'll DoCisco is seeking a security lead for its Cryptographic Services team. The role requires you to be knowledgeable of Public Key Interface (PKI) and key management services. The role also requires representing Cisco with various industry forums, leading Cisco's Trusted Root Store program, and providing consultation and expertise around PKI for the company.

PKI Policy Management: Role will be the point person for cryptographic controls within Cisco, which includes

Lead and update Cisco's Product Security Baseline standards for TLS and PKI

Update Cisco's corporate Cryptographic Controls Policy and Cryptographic Implementation Standard

Review the security of existing and new PKI systems within Cisco and its acquisitions

Responsible for maintaining updates and coordinating efforts to publish Cisco's Trusted Root Stores to provide trust anchors to Cisco products and services

PKI and TLS authority: Collaborate with business units in need of PKI, to include reviews of certificate construction, key management, and PKI architecture

PKI Controls and Compliance Audit and Review: Review the controls in place around Cryptographic Services' PKI systems, answering inquiries from auditors around controls and practices in place, ensuring the collection of evidence and compliance to audit frameworks

Industry Forum Representation: Role is also responsible for helping to represent Cisco with various PKI-related industry forums, including the CA/Browser Forum (CABF) and the Common Certificate Authority Database (CCADB)

Who You'll Work WithWe are a centralized group of architects, developers, engineers and project/program managers that specialize in building and delivering cryptographic key and certificate management capabilities to the company, as well as enabling the business to deliver enhanced services to Cisco's customers. From SSL to anti-counterfeit to software-signing to information rights management to product licensing, this group of highly passionate and hard-working people provide critical security services across the breadth of Cisco's internal and external functions.Who You AreYou are a senior-career individual with the desire and initiative to expand your skills in a complex and highly critical environment. You have real world experience in delivering PKI services, particularly supporting a publicly trusted Certificate Authority.Minimum Requirements

Bachelor's degree in Computer Science or related field or equivalent years of experience

7+years of experience with Public Key Interface and security

Knowledge of PKI and TLS. X.509 certificate contents

Knowledge of standard methodologies for PKI security. The ability to evaluate the security of PKI management practices and construction. Experience with current audit standards such as SOC-2 / ISO27001 / AICPA Web Trust, including interpreting requirements, identifying and reviewing compliance, and evidence collection

Preferred Requirements

Python scripting and programming

JIRA and Confluence management/administration, including workflow management and automation. Experience with Splunk for systems logging and reporting

Moderate experience with Linux administration, including comfort at the command line and with common systems administration and networking concepts

Prior experience with operating or building a public TLS certificate authority or public TLS trust store

Solid communication skills

Why Cisco?#WeAreCisco. We are all unique, but collectively we bring our talents to work as a team, to develop innovative technology and power a more inclusive, digital future for everyone. How do we do it? Well, for starters - with people like you!Nearly every internet connection around the world touches Cisco. We’re the Internet’s optimists. Our technology makes sure the data traveling at light speed across connections does so securely, yet it’s not what we make but what we make happen which marks us out. We’re helping those who work in the health service to connect with patients and each other; schools, colleges, and universities to teach in even the most challenging of times. We’re helping businesses of all shapes and sizes to connect with their employees and customers in new ways, providing people with access to the digital skills they need and connecting the most remote parts of the world - whether through 5G, or otherwise.We tackle whatever challenges come our way. We have each other’s backs, we recognize our accomplishments, and we grow together. We celebrate and support one another - from big and small things in life to big career moments. And giving back is in our DNA (we get 10 days off each year to do just that).We know that powering an inclusive future starts with us. Because without diversity and a dedication to equality, there is no moving forward. Our 30 Inclusive Communities, that bring people together around commonalities or passions, are leading the way. Together we’re committed to learning, listening, caring for our communities, whilst supporting the most vulnerable with a collective effort to make this world a better place either with technology, or through our actions.So, you have colorful hair? Don’t care. Tattoos? Show off your ink. Like polka dots? That’s cool. Pop culture geek? Many of us are. Passion for technology and world changing? Be you, with us! #WeAreCiscoCisco is an Affirmative Action and Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, national origin, genetic information, age, disability, veteran status, or any other legally protected basis.Cisco will consider for employment, on a case by case basis, qualified applicants with arrest and conviction records.