Cryptography Expert in Raiffeisen Bank

We are Raiffeisen Bank Ukraine, the Ukrainian bank. For 30 years we have been creating and building the banking system of our country. We were and are one of the largest banks in Ukraine and a reliable partner for millions of Ukrainians.We achieve high-speed digital products. We implement modern engineering practices, work on innovations that build high-quality interaction with our customers.Raiffeisen Bank operates as a universal bank offering a wide range of financial services to different customer segments: retail and corporate customers, small and medium-sized enterprises and financial institutions.Our priority is to provide the best quality of service. We strive to strengthen our competitive advantages by innovating, identifying and exploiting new opportunities. We are guided by values that provide a clear framework for our actions. More than 5,000 employees and nearly 3 million customers are the focus. #RaifTeam integrates the principles of diversity, equality and inclusion into the way we work. Combining the principles of people-centredness and innovation at work is our way.Become part of the #RaifTeam — people who are with us in the movement of innovation.Requirements:Knowledge/experience in administering certification centers CryptoKDC, MSPKI (ADCS), AWS Certificate Manager (ACM), CSK IIT, EJBCA, HSM infrastructure administrationPerforming duties of an information security administrator (NBU)Knowledge of Ukrainian legislation and NBU requirements for cryptographic protectionKnowledge of OWASP TOP 10Understanding of working principles and practical experience in key pair generation, CSR requests, work with OpenSSLUnderstanding of TSP, OCSP, CRL, TLS/mTLS protocols. Ability to work with Wireshark/tcpdumpUnderstanding of CA architecture and hierarchy, certificate usage, trust building, including X.509 and PKI standardsUnderstanding of RSA, ECDSA, AES algorithms, key length, and hash functionsAdministration of Windows OS (cmd, PowerShell, local log (EventLog) analysis, network troubleshooting at the endpoint level, cryptographic subsystem troubleshooting, and GPO at the endpoint level)Administration of Linux OS (understanding of architecture, file system hierarchy, permissions, logging, basic commands, working with updates and repositories)Experience with AWS (working principles, ALB, NLB, EC2, ACM, monitoring (CloudWatch, CloudTrail)Administration of MacOS (general understanding of operation principles, software installation, key and certificate storage)Experience with databases (connection setup, password change, executing simple queries)Responsibilities:Administration of certification authorities, servers, and infrastructure for them in AWSPerforming the functions of a certification center administratorPerforming the functions of an information security administrator (NBU)Analysis of the implementation of new technologiesExecution of regulatory proceduresWe offerInternational business career: work in a large international company that creates a diverse and inclusive environment for professional and personal growth. Strong Raiffeisen community of highly professional and successful teams from different countries.Challenging WOW-projects: involvement in large-scale projects on product development, using modern engineering technologies, a unique approach to encouraging customer-driven innovation.Comfortable and safe format of work: flexible work conditions including remote work or hybrid models alternating between in-office hours and remote work. Offices with uninterruptible power supplies and bomb shelters are provided to perform duties.Professional development: knowledge sharing with colleagues from abroad, development within the company, upskilling and reskilling opportunities, and internal competitions. The possibility of obtaining T-shaped expertise. Internal and external training programs. Corporate English courses. Soft skills training at our corporate L&D academy. Team building activities and involvement in social projects.Attractive social package and well-being: 28 days of paid vacation, medical insurance, and official employment. Mental and Physical health support: individual psychological sessions and lectures, -free online workouts, yoga.Stable income: competitive salary and bonuses for your efforts and contribution, rewards for participation in the referral program.Our team on social media:Facebook_____________________________________________________________________Ми — Райффайзен Банк Україна — український банк. Уже 30 років з перших кроків Незалежності ми створюємо та вибудовуємо банківську систему нашої держави #Разом_з_Україною. Ми були і є одним з найбільших банків країни, надійним партнером для мільйонів українців.Ми підвищуємо ефективність та швидкість цифрових продуктів, впроваджуємо сучасні інженерні практики та інновації. Робимо все для того, щоб клієнт отримав крутий та надійний сервіс.Райффайзен Банк працює як універсальний банк, надаючи широкий перелік фінансових послуг різним клієнтським сегментам — роздрібним та корпоративним клієнтам, малому та середньому бізнесу, фінансовим установам.Наш пріоритет — бездоганна якість послуг. Ми прагнемо зміцнити наші конкурентні переваги шляхом втілення інновацій, пошуку та використання нових можливостей. Ми зосереджені на цінностях, які є чітким орієнтиром для дій. У центрі уваги понад 5000 співробітників та майже 3 мільйони клієнтів . #Райфкоманда інтегрує принципи різноманіття, рівності та інклюзивності у повсякденну роботу. Поєднання у роботі принципів людиноцентричності та інновацій — наш шлях.Станьте частиною #Райфкоманди — людей, які будуть з нами в русі інновацій.Необхідні знання та досвід:Знання/досвід в адмініструванні центрів сертифікації CryptoKDC, MSPKI (ADCS), AWS Certificate Manager (ACM), ЦСК ІІТ, EJBCA, адміністрування інфраструктури HSMВиконання обов’язків адміністратора інформаційної безпеки (НБУ)Знання законодавства України та вимог НБУ з питань криптографічного захистуЗнання основних вразливостей інформаційних систем OWASP TOP 10Знання принципів роботи та практичний досвід з генерації пар ключів, запитів CSR, робота з OpenSSLРозуміння принципів роботи протоколів TSP, OCSP, CRL, TLS/mTLS. Вміння працювати з Wireshark/tcpdumpРозуміння архітектури та ієрархії СА, використання сертифікатів, побудова довіри, включаючи стандарти X.509 та PKIРозуміння алгоритмів RSA, ECDSA, AES, довжини ключа та хеWindows operating system administration (cmd, PowerShell, analysis of local logs (EventLog), network troubleshooting at the endpoint level, cryptographic subsystem and GPO troubleshooting at the endpoint level) Linux operating system administration (understanding the architecture, file system hierarchy, rights , logging, basic commands) Administration of the MacOS operating system (general understanding of the principles of operation, software installation, storage of keys and certificates) Experience with AWS (principles of operation, ALB, NLB, EC2, ACM, monitoring (CloudWatch, CloudTrail)) Experience with databases (connection settings, password change, execution of simple requests) What you will do: Administration of certification centers, servers and infrastructure for them in AWSPerformance of the functions of administrators of certification centersPerformance of the functions of an information security administrator for NBU protection toolsAnalysis of the introduction of new technologiesPerformance of regulatory procedures We offer: Work experience in a large systemic international business: working in a large international company that creates a diverse and inclusive environment for the professional and personal development of employees. A powerful community of Raiffeisen Bank International, which consists of highly professional and successful teams from different countries Cool WOW projects: participation in large-scale projects for the development of banking products, using advanced technologies and approaches that will allow our customers to receive the best, most convenient service Convenient and safe work format: flexible conditions, the ability to work remotely or in a hybrid model (remote and in the office). To perform your duties, you can use offices with uninterrupted power supply and available bomb shelters. Professional development: exchange of knowledge with colleagues from abroad, development within the company, professional development and retraining, participation in internal selections. The possibility of obtaining a t-shaped examination. Internal and external training. Corporate English language courses. Soft skills training at our corporate academy. Team-building activities and participation in social projects Social package and Wellbeing program: 28 days of paid basic vacation and additional vacations, health insurance, official employment. Mental and physical health care: individual psychological sessions and group lectures, free online sports classes Stable income: competitive salary and bonuses for your personal contribution, rewards for participation in the referral program