Cybersecurity Engineer (Public Key Infrastructure)

  • Full-time
  • Job Family Group: Technology and Operations

Company Description

Visa is a world leader in digital payments, facilitating more than 215 billion payments transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories each year. Our mission is to connect the world through the most innovative, convenient, reliable and secure payments network, enabling individuals, businesses and economies to thrive.

When you join Visa, you join a culture of purpose and belonging – where your growth is priority, your identity is embraced, and the work you do matters. We believe that economies that include everyone everywhere, uplift everyone everywhere. Your work will have a direct impact on billions of people around the world – helping unlock financial access to enable the future of money movement.

Join Visa: A Network Working for Everyone.

CardinalCommerce, a Visa solution, is a global leader in authenticating digital transactions. We work every day to make the digital shopping experience safe, rewarding, and engaging. We’re a global leader not only because of what we do, but because of who we are. Our team represents the best of the best. We work in a way that suits our people, their lifestyles, work styles, and individuality. We work hard as a team to collectively meet - and exceed – goals and consider each other family. We are one of the leading fintech companies in Northeast OH with teams locally and around the world working remotely. We are proud of what we do and how we do it.

When you work with us, you get the best of two worlds. Cardinal is a small company, with a welcoming, family-like atmosphere. But as a Visa solution, we offer the world-class resources and benefits of a global company. As companies with a worldwide customer base, both Cardinal and Visa realize the benefits of having a diverse employee base, both for our products and customer service. We believe in promoting a diverse and inclusive workplace. Our employees come with different backgrounds and experiences, resulting in many different approaches that are part of our success. We are dedicated to continuous improvement in all that we do. We use Lean and Agile principles and rituals as the framework for achieving that improvement. To achieve these goals, we need accomplished and ambitious people - people that recognize the value that comes with the varying perspectives, and the cultural awareness that comes with our diversity. What we are looking for could be someone just like you.

Cybersecurity is at the beating heart of our culture. Our diligence and expertise is what makes us the undisputed leader in electronic payments. We’ve made it our priority to create a top-tier Security Architecture team, poised to defend us against any potential cyber threats. We’re looking for those of you who are inherently driven and fascinated by the art and science of cyber defense. We’ll arm you with the very best tools and tech so that you can deliver top notch results.

Job Description

As a Cybersecurity Engineer, you will be responsible for the daily management of all Public Key Infrastructure Administrator activities and Hardware Security Module (HSM) configurations within Cardinal. This includes management of all certificates, maintaining inventories, and coordinating new and renewals of certificates for both internal and external customers. This role will work with the Cybersecurity team on any required remediation activity, as well as future proofing of processes to ensure compliance is achieved 100% of the time. Activity includes managing PKI services on servers, keystores, HSMs, load balancers, containers, and within enterprise tools.

What you'll do:

  • Serve as the point of contact for certificate questions and resolution of certificate issues
  • Develop, maintain, and publish certificate management, key management, and HSM management processes, procedures, and inventories
  • Coordinate with external and internal customers in the maintenance of required certificates in adherence to Visa certificate renewal timelines
  • Manage cryptographic keys securely throughout the defined cryptographic lifecycle (generation, conveyance, storage, cryptoperiod, replacement/rotation, escrow, destruction)
  • Mentor organization on best practices and day-to-day certificate management
  • Consult with internal teams to identify cryptography requirements in line with PCI requirements and best practices
  • Participate in on-call rotation for escalations for key, certificate, and HSM issues and troubleshooting
  • Follow strict security protocols including dual control and using cryptographic keys for their intended purpose

Additional Responsibilities:

  • Provide first-class support to the cybersecurity operations staff for resolving certificate related cybersecurity issues
  • Remain current with emerging administration technologies and practices

Qualifications

What we need you to have:

  • Minimum of a Bachelor’s Degree in Computer Science, Information Technology, or other related field
  • In lieu of a Bachelor’s degree, a high school diploma/equivalent and an additional 4 years of hands-on work experience will be considered.
  • 3+ years’ experience in PKI Administration
  • A combination of select industry certifications is required.
  • Preferred certifications include Public Key Infrastructure, Infrastructure IT, Systems Administration, Network Administration Windows/Linux OS, Active Directory and Virtualization.
  • Understanding of and experience with cryptography algorithms
  • Experience with HSMs, PKI, tokenization systems, data encryption solutions (e.g., Thales, NCipher, Vormetric, etc.)
  • Experience with Certificate Lifecycle Management (CLM) solutions
  • Solid experience with cybersecurity strategies and frameworks to protect data assets.

We would love for you to have:

  • Advanced understanding of PKI and the usage of certificates for their intended purposes
  • A proven record of accomplishment in designing certificate administration controls for use in a variety of technologies.
  • Advanced knowledge of PCI DSS and PCI 3DS standards

Additional Information

Work Hours: Varies upon the needs of the department.

Mental/Physical Requirements: This position will be performed in an office setting. The position will require the incumbent to sit and stand at a desk, communicate in person and by telephone, frequently operate standard office equipment, such as telephones and computers.
Visa is an EEO Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.
Visa will consider for employment qualified applicants with criminal histories in a manner consistent with applicable local law, including the requirements of Article 49 of the San Francisco Police Code.

U.S. APPLICANTS ONLY: The estimated salary range for a new hire into this position is 97,300 - 124,000 USD, which may include potential sales incentive payments (if applicable). Salary may vary depending on job-related factors which may include knowledge, skills, experience, and location. In addition, this position may be eligible for bonus and equity. Visa has a comprehensive benefits package for which this position may be eligible that includes Medical, Dental, Vision, 401 (k), FSA/HSA, Life Insurance, Paid Time Off, and Wellness Program.

This position is headquartered out of the Visa/CardinalCommerce Mentor, OH office location. To foster community, connection, and collaboration, it is expected that candidates adhere to a hybrid working model reporting to the office 2-3x per week. 

Privacy Policy