Senior IT Security Engineer / PKI - Build and Improve (f/m/d)

Deutsche Börse Prague Branch • Prague

Learn. Develop. Grow. But always: Share value

Join our international team that drives positive change, united by a spirit of openness and curiosity. We empower you to have an impact and to grow – personally and professionally. With us, you work at the heart of financial systems and evolve the way markets operate. We’re excited about the future because we are the ones shaping it. Let´s do this together by sharing value!

Who we are

Tracing its origins to 1585, Deutsche Börse Group has become one of the world’s leading exchange organisations and an innovative market infrastructure provider. In this role, we provide investors, financial institutions and companies access to global capital markets. What’s your part in all this? With your commitment you contribute to the success of our unique business model: offering a wide range of products, services and technologies for security, transparency and integrity on the markets. By creating trust in the markets of today and tomorrow we foster growth and contribute to the prosperity of future generations.

Prague

Your career at Deutsche Börse Group

Your area of work

Secure the future of Deutsche Börse Group by building and maintaining our critical PKI infrastructure. As a key member of the Security IT - Engineering team, you'll be responsible for the design, implementation, and operation of our next-generation PKI solution. This includes ensuring the confidentiality, integrity, and availability of digital certificates and cryptographic keys, enabling secure communication and transactions across the organization. Contribute to a challenging and rewarding environment where your expertise will have a direct impact on the security posture of a leading global organization.

Your Responsibilities

Architect, design, and implement a robust and scalable PKI solution, including certificate authorities, registration authorities, and related components.
Manage and maintain the PKI infrastructure, ensuring high availability and performance.
Develop and implement policies and procedures for certificate issuance, revocation, and lifecycle management.
Troubleshoot and resolve PKI-related issues, ensuring minimal downtime and disruption to business operations.
Automate PKI tasks and processes using scripting and automation tools.
Collaborate with other security teams to integrate PKI with existing security systems.
Maintain comprehensive documentation in line with international Quality Management standards.
Conduct regular security assessments and vulnerability scans of the PKI infrastructure.
Stay abreast of industry best practices and emerging threats in the PKI landscape.
Provide occasional on-call support (rotational basis).

Your Profile

Deep understanding of PKI principles, concepts, and best practices.
Extensive experience in designing, implementing, and managing PKI solutions using industry-standard tools and technologies.
Experience with Hardware Security Modules (HSMs) and key management best practices.
Solid understanding of X.509 certificates, CRLs, and OCSP.
Experience with scripting and automation tools (e.g., BASH, Python, PowerShell, Ansible, Terraform).
Strong problem-solving skills and an analytical mindset.
Excellent communication and collaboration skills.
Proficiency in written and spoken English.

Nice to have

Experience in cloud infrastructures.
Experience with cloud-based Encryption Keys Management.
Experience with certificate lifecycle management tools.
Knowledge of IT security standards and frameworks (e.g., ISO 27001, NIST).

Why Deutsche Börse Group?

We are committed to providing a work environment where everyone feels welcome and can reach their full potential. Our standards go far beyond simply matching candidates with the right position.

Mobility

We enable you to move freely with our job tickets, job (e-)bikes and free parking opportunities.

Work environment

Collaboration, communication, or deep focus – in our modern office buildings you will find the perfect work environment. Free drinks and food and meal allowances included.

Health and wellbeing

We care for your health and wellbeing and besides various health promotion measures we offer you a group accident insurance and additional insurance offers at discounted rates.

Financial stability

We provide financial stability by offering attractive salaries, company pension schemes, participation in our Group Share Plan, as well as bonuses, subsidies and discounts.

Hybrid work

Collaborate and exchange on-site or work remotely several days a week in line with business needs and local regulations. Our hybrid working model combines the best of both worlds.

Flexible working hours

We want your job to fit your life situation and offer flexible working time models, childcare allowance, or the possibility to study alongside your job.

Internationality

Our market infrastructures are globally connected. Working with us means collaborating with like-minded colleagues across over 60 locations from more than 100 nations.