What are the responsibilities and job description for the Technical Leader Cryptographic Controls position at Cisco Systems?
What You'll Do
Cisco is seeking a security lead for its Cryptographic Services team. The role requires you to be knowledgeable of Public Key Interface (PKI) and key management services. The role also requires representing Cisco with various industry forums, leading Cisco's Trusted Root Store program, and providing consultation and expertise around PKI for the company.
- PKI Policy Management: Role will be the point person for cryptographic controls within Cisco, which includes
- Lead and update Cisco's Product Security Baseline standards for TLS and PKI
- Update Cisco's corporate Cryptographic Controls Policy and Cryptographic Implementation Standard
- Review the security of existing and new PKI systems within Cisco and its acquisitions
- Responsible for maintaining updates and coordinating efforts to publish Cisco's Trusted Root Stores to provide trust anchors to Cisco products and services
- PKI and TLS authority: Collaborate with business units in need of PKI, to include reviews of certificate construction, key management, and PKI architecture
- PKI Controls and Compliance Audit and Review: Review the controls in place around Cryptographic Services' PKI systems, answering inquiries from auditors around controls and practices in place, ensuring the collection of evidence and compliance to audit frameworks
- Industry Forum Representation: Role is also responsible for helping to represent Cisco with various PKI-related industry forums, including the CA/Browser Forum (CABF) and the Common Certificate Authority Database (CCADB)
Who You'll Work With
We are a centralized group of architects, developers, engineers and project/program managers that specialize in building and delivering cryptographic key and certificate management capabilities to the company, as well as enabling the business to deliver enhanced services to Cisco's customers. From SSL to anti-counterfeit to software-signing to information rights management to product licensing, this group of highly passionate and hard-working people provide critical security services across the breadth of Cisco's internal and external functions.
Who You Are
You are a senior-career individual with the desire and initiative to expand your skills in a complex and highly critical environment. You have real world experience in delivering PKI services, particularly supporting a publicly trusted Certificate Authority.
Minimum Requirements
- Bachelor's degree in Computer Science or related field
- 7 years of experience with Public Key Interface and security
- Knowledge of PKI and TLS. X.509 certificate contents
- Public and private PKI for TLS. Certificate authority hierarchies and trust management
- Key management technologies and practices. Authoritative knowledge of standard methodologies for PKI security. The ability to evaluate the security of PKI management practices and construction. Experience with current audit standards such as SOC-2 / ISO27001 / AICPA WebTrust, including interpreting requirements, identifying and reviewing compliance, and evidence collection
Preferred Requirements
- Python scripting and programming
- JIRA and Confluence management/administration, including workflow management and automation. Experience with Splunk for systems logging and reporting
- Moderate experience with Linux administration, including comfort at the command line and with common systems administration and networking concepts
- Prior experience with operating or building a public TLS certificate authority or public TLS trust store
- Solid communication skills
Why Cisco?
#WeAreCisco. We are all unique, but collectively we bring our talents to work as a team, to develop innovative technology and power a more inclusive, digital future for everyone. How do we do it? Well, for starters – with people like you!
Nearly every internet connection around the world touches Cisco. We’re the Internet’s optimists. Our technology makes sure the data traveling at light speed across connections does so securely, yet it’s not what we make but what we make happen which marks us out. We’re helping those who work in the health service to connect with patients and each other; schools, colleges, and universities to teach in even the most challenging of times. We’re helping businesses of all shapes and sizes to connect with their employees and customers in new ways, providing people with access to the digital skills they need and connecting the most remote parts of the world – whether through 5G, or otherwise.
We tackle whatever challenges come our way. We have each other’s backs, we recognize our accomplishments, and we grow together. We celebrate and support one another – from big and small things in life to big career moments. And giving back is in our DNA (we get 10 days off each year to do just that).
We know that powering an inclusive future starts with us. Because without diversity and a dedication to equality, there is no moving forward. Our 30 Inclusive Communities, that bring people together around commonalities or passions, are leading the way. Together we’re committed to learning, listening, caring for our communities, whilst supporting the most vulnerable with a collective effort to make this world a better place either with technology, or through our actions.
So, you have colorful hair? Don’t care. Tattoos? Show off your ink. Like polka dots? That’s cool. Pop culture geek? Many of us are. Passion for technology and world changing? Be you, with us! #WeAreCisco
