Cybersecurity Engineer (Public Key Infrastructure)

Company Description

Visa is a world leader in digital payments, facilitating more than 215 billion payments transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories each year. Our mission is to connect the world through the most innovative, convenient, reliable and secure payments network, enabling individuals, businesses and economies to thrive.

When you join Visa, you join a culture of purpose and belonging – where your growth is priority, your identity is embraced, and the work you do matters. We believe that economies that include everyone everywhere, uplift everyone everywhere. Your work will have a direct impact on billions of people around the world – helping unlock financial access to enable the future of money movement.

Join Visa: A Network Working for Everyone.

CardinalCommerce, a Visa solution, is a global leader in authenticating digital transactions. We work every day to make the digital shopping experience safe, rewarding, and engaging. We’re a global leader not only because of what we do, but because of who we are. Our team represents the best of the best. We work in a way that suits our people, their lifestyles, work styles, and individuality. We work hard as a team to collectively meet - and exceed – goals and consider each other family. We are one of the leading fintech companies in Northeast OH with teams locally and around the world working remotely. We are proud of what we do and how we do it.

When you work with us, you get the best of two worlds. Cardinal is a small company, with a welcoming, family-like atmosphere. But as a Visa solution, we offer the world-class resources and benefits of a global company. As companies with a worldwide customer base, both Cardinal and Visa realize the benefits of having a diverse employee base, both for our products and customer service. We believe in promoting a diverse and inclusive workplace. Our employees come with different backgrounds and experiences, resulting in many different approaches that are part of our success. We are dedicated to continuous improvement in all that we do. We use Lean and Agile principles and rituals as the framework for achieving that improvement. To achieve these goals, we need accomplished and ambitious people - people that recognize the value that comes with the varying perspectives, and the cultural awareness that comes with our diversity. What we are looking for could be someone just like you.

Cybersecurity is at the beating heart of our culture. Our diligence and expertise is what makes us the undisputed leader in electronic payments. We’ve made it our priority to create a top-tier Security Architecture team, poised to defend us against any potential cyber threats. We’re looking for those of you who are inherently driven and fascinated by the art and science of cyber defense. We’ll arm you with the very best tools and tech so that you can deliver top notch results.

Job Description

As a Cybersecurity Engineer, you will be responsible for the daily management of all Public Key Infrastructure Administrator activities and Hardware Security Module (HSM) configurations within Cardinal. This includes management of all certificates, maintaining inventories, and coordinating new and renewals of certificates for both internal and external customers. This role will work with the Cybersecurity team on any required remediation activity, as well as future proofing of processes to ensure compliance is achieved 100% of the time. Activity includes managing PKI services on servers, keystores, HSMs, load balancers, containers, and within enterprise tools.

What you'll do:

• Serve as the point of contact for certificate questions and resolution of certificate issues
• Develop, maintain, and publish certificate management, key management, and HSM management processes, procedures, and inventories
• Coordinate with external and internal customers in the maintenance of required certificates in adherence to Visa certificate renewal timelines
• Manage cryptographic keys securely throughout the defined cryptographic lifecycle (generation, conveyance, storage, cryptoperiod, replacement/rotation, escrow, destruction)
• Mentor organization on best practices and day-to-day certificate management
• Consult with internal teams to identify cryptography requirements in line with PCI requirements and best practices
• Participate in on-call rotation for escalations for key, certificate, and HSM issues and troubleshooting
• Follow strict security protocols including dual control and using cryptographic keys for their intended purpose

Additional Responsibilities:

• Provide first-class support to the cybersecurity operations staff for resolving certificate related cybersecurity issues
• Remain current with emerging administ