PKI Security Analyst

Role Value Proposition

MetLife is searching for an enthusiastic, passionate, and recognized individual to play a critical role in its industry-leading Public Key Infrastructure (PKI) for global key management initiatives. You will execute critical security operations activities, including incident response, vulnerability management, analysis, event management, and recovery.

Key Responsibilities

• Implementation and support of all key management areas, including SSL certificates, SSH keys, and other digital certificates and encryption.
• Support discovery, monitoring, alerting, and analysis for PKI and underlying infrastructure.
• Maintain documentation related to the key management practice, including areas of design, proof of concept use cases, implementation, validation, operational management, and disaster recovery.
• Evaluate current global and technology-specific processes to determine process improvements, and how best to gain more effectiveness and efficiency.
• Maintain and enhance technical requirements for implementation and adoption of a best-in-class PKI within MetLife.
• Communicate PKI security & encryption policy and implementations.

Required Essential Business Experience and Technical Skills

• Bachelor’s degree in Computer Science, Information Systems, IT Security, or equivalent work experience.
• 2-4 years of work experience with combined IT security and PKI operations.
• Solid knowledge of network and web-related protocols (e.g., TCP/IP, TLS, secure communication protocols).
• Good organizational and communication skills.

Preferred Experience

• Experience with Certificate Lifecycle Management tools (CyberArk/Venafi preferred).
• Skills with scripting languages such as PowerShell, Python, JavaScript, and Bash.
• Experience using AI tools to drive automation and efficiency.
• Experience with enterprise deployment tools (Tanium preferred).
• Competency with Linux/Unix and Windows operating systems.
• Experience with x509 certificate signer tools (Microsoft CA preferred).
• Moderate knowledge of modern security architectures, their challenges, common approaches to overcome their challenges, and their inherent security strengths and weaknesses.
• Experience with cloud native key management is a plus.
• Strong interpersonal and team skills.
• Strong verbal and written communication skills.
• High level of initiative, self-motivation, resourcefulness, and collaboration.