IT-Security Engineer

Position Overview

Job Title- Information Security Specialist, Associate

Location- Pune, India

Role Description

• The Cryptography Engineering and Solutions team at Deutsche Bank, operating under the Chief Security Office (CSO), defines the bank's cryptography strategy and provides expert guidance across all cryptographic services, including regulatory compliance and audit readiness.
• For the MyCert (On‑Prem Certificate Management) platform, we are seeking an Information Security Specialist to support and enhance on‑premises PKI and certificate lifecycle management services. The role focuses on automating, operating, and stabilizing certificate issuance, renewal, truststore management, and CA integrations for internal platforms and applications, ensuring secure, compliant, and scalable certificate operations across enterprise environments.

What we'll offer you

As part of our flexible scheme, here are just some of the benefits that you'll enjoy

• Best in class leave policy
• Gender neutral parental leaves
• 100% reimbursement under childcare assistance benefit (gender neutral)
• Sponsorship for Industry relevant certifications and education
• Employee Assistance Program for you and your family members
• Comprehensive Hospitalization Insurance for you and your dependents
• Accident and Term life Insurance
• Complementary Health screening for 35 yrs. and above

Your key responsibilities

• Design, implement, and support on‑premises certificate lifecycle management for applications using MyCert, including issuance, renewal, revocation, and replacement.
• Automate certificate onboarding and renewal workflows for on‑prem applications, middleware, web servers, databases, and integration platforms.
• Manage and integrate enterprise Certificate Authority Services (e.g., Microsoft ADCS, external/public CAs) with MyCert.
• Implement and maintain centralized truststore and keystore management (JKS, PKCS12, PEM) across heterogeneous platforms.
• Support certificate enrollment and renewal in UAT/PROD environments, including post‑renewal validation and incident remediation.
• Troubleshoot certificate‑related issues such as chain validation failures, CRL/OCSP errors, domain mismatches, key usage issues, and application binding problems.
• Collaborate with application and infrastructure teams to onboard certificates to MyCert and migrate from legacy or manual certificate processes.
• Contribute to MyCert platform enhancements, including automation scripts, APIs, and backend services for certificate operations.
• Ensure operational resilience, audit readiness, and compliance with internal security policies and regulatory requirements.
• Provide guidance to application teams on best practices for PKI, certificate hygiene, and lifecycle automation.
• Participate in KeyFactor / PKI platform upgrades, platform stability initiatives, and continuous improvement of certificate services.

Your skills and experience

Core Technical Skills

• Strong experience developing or enhancing Java‑based applications or services for secure certificate issuance, renewal, validation, and platform integrations.
• Strong understanding of PKI, X.509 certificates, certificate chains, key management, CRL/OCSP, and cryptographic standards.
• Experience with on‑prem PKI platforms, including Microsoft ADCS and enterprise certificate management solutions (e.g., MyCert, KeyFactor).
• Hands‑on experience with certificate lifecycle automation across Linux and Windows environments.
• Proficiency in scripting and automation (Python, Bash, PowerShell) for operational and integration workflows.
• Experience managing certificates for web servers (Apache, NGINX, IIS), middleware, application servers, and backend services.
• Understanding of Identity and Access Management, service accounts, and access control models in enterprise environments.
• Familiarity with CI/CD pipelines and infrastructure‑as‑code concepts for integrating certificate automation.

Soft Skills

• Strong troubleshooting and analytical mindset, especially in production‑critical environments.
• Ability to collaborate effectively with cryptography architects, infrastructure teams, and application owners.
• Clear communication skills to support onboarding, explain complex PKI concepts, and produce operational documentation.

Nice‑to‑Have Skills

• Experience with KeyFactor configuration, upgrades, or integrations.
• Exposure to audit and regulatory requirements related to cryptography and certificate management.
• Understanding of hybrid PKI models (On‑Prem ↔ Cloud certificate workflows)..

How we'll support you

• Training and development to help you excel in your career
• Coaching and support from experts in your team
• A culture of continuous learning to aid progression
• A range of flexible benefits that you can tailor to suit your needs

About us and our teams

Please visit our company website for further information:

We strive for a in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.
Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.
We welcome applications from all people and promote a positive, fair and inclusive work environment.