Assistant Manager - KCM Senior Support Engineer – Deloitte Support Services India Private Limited
Summary
The KCM Senior Support Engineer role requires advanced to mastery skills that enable the individual to deliver a high level of service and to meet the expectation from the business of a highly available agile infrastructure.
The primary objective of the position is to provide senior level support for the day-to-day operation of the Key and Certificate Management (KCM) service and its components.
Advanced knowledge of Core, Specialized and technical competencies is required, along with a very solid understanding of an enterprise IT infrastructure operational environment, security architecture and knowledgeable on standards and industry best practices for cryptography, encryption, Public Key Infrastructure, certificate management and PowerShell.
The candidate must be able to demonstrate advanced skills in Certificate Management using industry tools such as Venafi, knowledge of HSMs and PKI, knowledge of web server technologies, knowledge of load balancer and other network devices, TLS implementation for server-side and mutual authentication.
This position reports to the KCM Regional Manager.
Responsibilities
Specific responsibilities may change based on the given needs of the business. General responsibilities must always be carried out in accordance with defined standards, policies and procedures, and will include:
Infrastructure Management
· Management and operation of Key and Certificate Management Components
· Management and control of enterprise infrastructure Hardware Security Modules (HSM)
· Management and control of Key Certificate Management Disaster Recovery Process
· Management and control of KCM automation process and tools and resiliency
· Ensure KCM infrastructure runs according to established performance and high availability parameters.
· Oversee and provide guidance on technical aspects to junior members of the team.
Operational Support and Service Delivery
· Provide senior level support for Venafi, CipherTrust Manager and Thales HSM infrastructure and systems.
· Ensure the successful operation of the KCM services by timely processing service requests, addressing incident tickets and following change management global practices.
· Responsible for the administration and daily maintenance for the KCM systems.
· Serve as a key administrator/custodian for the Global KCM service HSMs and CipherTrust Manager appliances.
· Perform the duties of Registration Authority by validating certificate requests and following Global policies for certificate issuance.
· Assist and provide guidance to junior staff with the completion of daily tasks.
· Educate users on the processes to request and use the KCM services, including but not limited to certificate requests and renewals, database encryption key management setups and code signing.
· Responsible for maintaining and generating reporting, analytics, and dashboards for enterprise certificate management.
· Work with vendors to continuously improve technological features and capabilities, operational management and troubleshooting capabilities, end user interfaces and security and performance reporting.
· Consult with business, project and technical teams on adoption and consumption of the KCM services.
· Train and support other support teams including member firms, global member firm infrastructure support and Global Network Operations Centre to streamline support processes.
· Participate in postmortem activities and report generation
· Participate in 24x7x365 on-call rotation.
· Maintain and support High Availability capacity and resiliency.
· Support Disaster Recovery testing on a yearly basis
· Identify and report any non-compliance with information security or other policies.
· Respond to and manage escalated service issues and problems.
· Delivery of operational KPIs and associated reports.
· Ensure the regional KCM services meet defined SLAs
· Support and development of PowerShell-based automation scripts for Certificate Management related Tasks
Project Delivery
· Work with Technical Delivery Managers and project managers to scope and on-board projects
· Participate in sprint planning activities
· Execute project delivery plans
· Contribute to requirements gathering
· Contribute to architecture design
· Identify and escalate project risks
· Attend meetings as needed
· Contributes to infrastructure architectural activities by applying select architectural techniques and technical knowledge. Understands and leverages infrastructure architectural principles for cross-functional purposes. Works with vendors as well as internally.
Knowledge Sharing / Documentation
· Contribute to, produce and maintain process, procedure, and other operational documentation, including runbooks, user manuals, administration guides, FAQs, etc.
· Assist in training new staff in technical processes and procedures
· Attend training and knowledge improvement activities as required
· Provide assistance in management of documents and processes
· Assist in training new staff in technical processes and procedures
· Participate in service awareness activities
Qualifications
· Bachelor’s degree in computer science, Engineering, Information Systems, or equivalent industry experience
· 3-5 plus years’ experience in developing, implementing, or supporting information systems.
· 2-3 plus years’ experience with Venafi
· 1-2 plus years’ experience with Vormetric or CipherTrust Manager
· 1-2 plus years’ experience with Thales HSMs
· Experience in writing PowerShell Scripts.
· Basic knowledge of cryptographic related standards and network compliance requirements, security concepts, encryption keys, key life cycle requirements and symmetric and asymmetric encryption methodologies and algorithms applicable to the services industry.
· Working knowledge of PKI, TLS, certificate management and database encryption at rest.
· Working knowledge on end-to-end management of certificate authorities, key stores, keyrings, hardware security modules (HSM) and encryption devices.
· Advanced knowledge of PowerShell scripting.
· Technical writing skills and ability to monitor consistency and accuracy in written materials
· Knowledge of SDLC and IT governance concepts
· Experience executing advanced services and supervising staff in delivering basic services
· Strong oral and written communications skills
· Strong potential for growth and acceptance of additional responsibilities
· Ability to take a broad view of his/her position and take initiative to communicate, interact and cooperate with others
· Demonstrated ability to write reports and to participate in presentations
· Ability to work as a member of a team and independently
Other Qualifications
· Microsoft Server Platform
· Knowledge of Microsoft Certificate Authority
· PowerShell and/or other scripting languages
· Microsoft SQL Server administration
· Knowledge of Venafi
· Knowledge of Vormetric or CipherTrust
Professional Qualifications are preferred, including:
· Microsoft Windows Server
· CISSP or similar Security certification
· Venafi certification
· Vormetric certification
· ITIL Foundation Qualification
Location: Hyderabad
Shift Timing: 11 am to 8 pm
The team
At Deloitte, we’re all about collaboration. And nowhere is this more apparent than among our 2,000-strong internal services team. With our combined specialist skills, we provide all the essential support and advice our client-facing colleagues need, right across the firm. This enables them to focus all of their efforts on delivering the best service possible to their clients. Covering seven distinct areas; Human Resources, Clients & Industries, Finance & Legal, Practice Support Services, Quality & Risk Services, IT Services, and Workplace Services & Real Estate, together we live, breathe and deliver the Deloitte experience.
How you’ll grow
At Deloitte, we’ve invested a great deal to create a rich environment in which our professionals can grow. We want all our people to develop in their own way, playing to their own strengths as they hone their leadership skills. And, as a part of our efforts, we provide our professionals with a variety of learning and networking opportunities—including exposure to leaders, sponsors, coaches, and challenging assignments—to help accelerate their careers along the way. No two people learn in exactly the same way. So, we provide a range of resources including live classrooms, team-based learning, and eLearning. DU: The Leadership Center in India, our state-of-the-art, world-class learning Center in the Hyderabad offices is an extension of the Deloitte University (DU) in Westlake, Texas, and represents a tangible symbol of our commitment to our people’s growth and development. Explore DU: The Leadership Center in India
Benefits
At Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits. Learn more about what working at Deloitte can mean for you.
Deloitte’s culture
Our positive and supportive culture encourages our people to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them to be healthy, centered, confident, and aware. We offer well-being programs and are continuously looking for new ways to maintain a culture that is inclusive, invites authenticity, leverages our diversity, and where our people excel and lead healthy, happy lives. Learn more about Life at Deloitte.
Corporate citizenship
Deloitte is led by a purpose: to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our people and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities. Learn more about Deloitte’s impact on the world.