Cryptography Expert in Raiffeisen Bank Ukraine

Weare Raiffeisen Bank Ukraine, the Ukrainian bank. For 30years wehave been creating and building the banking system ofour country. Wewere and are one ofthe largest banks inUkraine and areliable partner for millions ofUkrainians. Weachieve high-speed digital products. Weimplement modern engineering practices, work oninnovations that build high-quality interaction with our customers. Raiffeisen Bank operates asauniversal bank offering awide range offinancial services todifferent customer segments: retail and corporate customers, small and medium-sized enterprises and financial institutions. Our priority istoprovide the best quality ofservice. Westrive tostrengthen our competitive advantages byinnovating, identifying and exploiting new opportunities. Weare guided byvalues that provide aclear framework for our actions. More than 5,000 employees and nearly 3million customers are the focus. #RaifTeam integrates the principles ofdiversity, equality and inclusion into the way wework. Combining the principles ofpeople-centredness and innovation atwork isour way. Become part ofthe #RaifTeam— people who are withus inthe movement ofinnovation. Requirements Knowledge/experience in administering certification centers CryptoKDC, MSPKI (ADCS), AWS Certificate Manager (ACM), CSK IIT, EJBCA, HSM infrastructure administration Performing duties of an information security administrator (NBU) Knowledge of Ukrainian legislation and NBU requirements for cryptographic protection Knowledge of OWASP TOP 10 Understanding of working principles and practical experience in key pair generation, CSR requests, work with OpenSSL Understanding of TSP, OCSP, CRL, TLS/mTLS protocols. Ability to work with Wireshark/tcpdump Understanding of CA architecture and hierarchy, certificate usage, trust building, including X.509 and PKI standards Understanding of RSA, ECDSA, AES algorithms, key length, and hash functions Administration of Windows OS (cmd, PowerShell, local log (EventLog) analysis, network troubleshooting at the endpoint level, cryptographic subsystem troubleshooting, and GPO at the endpoint level) Administration of Linux OS (understanding of architecture, file system hierarchy, permissions, logging, basic commands, working with updates and repositories) Experience with AWS (working principles, ALB, NLB, EC2, ACM, monitoring (CloudWatch, CloudTrail) Administration of MacOS (general understanding of operation principles, software installation, key and certificate storage) Experience with databases (connection setup, password change, executing simple queries) Responsibilities Administration of certification authorities, servers, and infrastructure for them in AWS Performing the functions of a certification center administrator Performing the functions of an information security administrator (NBU) Analysis of the implementation of new technologies Execution of regulatory procedures Benefits International business career: work inalarge international company that creates adiverse and inclusive environment for professional and personal growth. Strong Raiffeisen community ofhighly professional and successful teams from different countries. Challenging WOW-projects: i nvolvement inlarge-scale projects onproduct development, using modern engineering technologies, aunique approach toencouraging customer-driven innovation. Comfortable and safe format ofwork: flexible work conditions including remote work orhybrid models alternating between in-office hours and remote work. Offices with uninterruptible power supplies and bomb shelters are provided toperform duties. Professional development: knowledge sharing with colleagues from abroad, development within the company, upskilling and reskilling opportunities, and internal competitions. The possibility ofobtaining T-shaped expertise. Internal and external training programs. Corporate English courses. Soft skills training atour corporate L&Dacademy. Team building activities and involvement insocial projects. Attractive social package and well-being: 28days ofpaid vacation, medical insurance, and official employment. Mental and Physical health support: individual psychological sessions and lectures, -free online workouts, yoga. Stable income: competitive salary and bonuses for your efforts and contribution, rewards for participation inthe referral program. Our team onsocial media: __________________________________________________________________________________________________ Ми— Райффайзен Банк Україна— український банк. Уже 30років зперших кроків Незалежності мистворюємо тавибудовуємо банківську систему нашої держави#Разом_з_Україною . Мибули ієодним знайбільших банків країни, надійним партнером для мільйонів українців. Мипідвищуємо ефективність ташвидкість цифрових продуктів, впроваджуємо сучасні інженерні практики таінновації. Робимо все для того, щоб клієнт отримав крутий танадійний сервіс. Райффайзен Банк працює якуніверсальний банк, надаючи широкий перелік фінансових послуг різним клієнтським сегментам— роздрібним такорпоративним клієнтам, малому тасередньому бізнесу, фінансовим установам. Наш пріоритет— бездоганна якість послуг. Мипрагнемо зміцнити наші конкурентні переваги шляхом втілення інновацій, пошуку тавикористання нових можливостей. Мизосереджені націнностях, які єчітким орієнтиром для дій. Уцентрі уваги понад 5000 співробітників тамайже 3мільйони клієнтів . #Райфкоманда інтегрує принципи різноманіття, рівності таінклюзивності уповсякденну роботу. Поєднання уроботі принципів людиноцентричності таінновацій— наш шлях. Станьте частиною #Райфкоманди— людей, які будуть знами врусі інновацій. Необхідні знання та досвід: Знання/досвід в адмініструванні центрів сертифікації CryptoKDC, MSPKI (ADCS), AWS Certificate Manager (ACM), ЦСК ІІТ, EJBCA, адміністрування інфраструктури HSM Виконання обов’язків адміністратора інформаційної безпеки (НБУ) Знання законодавства України та вимог НБУ з питань криптографічного захисту Знання основних вразливостей інформаційних систем OWASP TOP 10 Знання принципів роботи та практичний досвід з генерації пар ключів, запитів CSR, робота з OpenSSL Розуміння принципів роботи протоколів TSP, OCSP, CRL, TLS/mTLS. Вміння працювати з Wireshark/tcpdump Розуміння архітектури та ієрархії СА, використання сертифікатів, побудова довіри, включаючи стандарти X.509 тand PKI Understanding of RSA, ECDSA, AES algorithms, key lengths and hash functions Windows operating system administration (cmd, PowerShell, local log analysis (EventLog), endpoint network troubleshooting, endpoint cryptographic subsystem and GPO troubleshooting ) Administration of the Linux operating system (understanding of the architecture, file system hierarchy, rights, logging, basic commands) Administration of the MacOS operating system (general understanding of the principles of operation, software installation, storage of keys and certificates) Experience with AWS (principles of operation, ALB, NLB, EC2, ACM, monitoring (CloudWatch, CloudTrail)) Experience working with databases (setting up connections, changing passwords, performing simple queries) What you will do: Administer CAs, servers and infrastructure for them in AWS Perform functions of CA administrators Perform functions information security administrator for NBU protection tools Analysis of the implementation of new technologies Implementation of regulatory procedures We offer: Work experience in a large systemic international business: work for a large international company that creates a diverse and inclusive environment for the professional and personal development of employees. The powerful community of Raiffeisen Bank International, which consists of highly professional and successful teams from different countries Cool WOW projects: participation in large-scale banking product development projects, using advanced technologies and approaches that will allow our customers to receive the best, most convenient service Convenient and safe work format: flexible conditions, the ability to work remotely or a hybrid model (remote tavofisi). To perform your duties, you can use offices with uninterrupted power supply and available bomb shelters. Professional development: exchange of knowledge with colleagues from abroad, development within the company, advanced training and retraining, participation in internal selections. The possibility of obtaining a t-shaped examination. Internal and external training. Corporate English language courses. Soft skills trainings at our corporate academy. Team-building activities and participation in social projects Social package and Wellbeing program: 28 days of paid basic leave and additional leave, medical insurance, official employment. Care for mental and physical health: individual psychological sessions and group lectures, free online sports classes Stable income: competitive salary and bonuses for your personal contribution, rewards for participation in the referral program