Senior PKI/ Cryptography Engineer

Freddie Mac•McLean, VA

1d•$126,000 - $190,000

About The Position

We are seeking a Senior PKI/Cryptography Engineer to join the Data Protection team within the Information Security Engineering department of the Information Technology Division. The engineer is responsible for providing administration, engineering, and operations support for PKI application components, and cryptographic-based tools within Data Protection. This position has an on-call requirement. In this role, you will help fulfill the Information Security department’s vision of reducing information risk by ensuring and enhancing the Confidentiality, Availability, and Integrity of Information systems at Freddie Mac. You will work towards the development and delivery of our technical solutions related to Data Protection. You will build, develop, and maintain relationships with internal and external customers, and vendors to formulate remediation solutions for issues related with Information Security.

Requirements

5-7+ years in IT security, including execution, testing, and maintenance of SOX controls.
5+ years of hands-on experience in PKI and cryptography, with a strong understanding of data encryption, SaaS security solutions, and cloud client security.
Knowledge of security and cryptographic primitives like hashes, symmetric/asymmetric key algorithms, and signature algorithms.
Experience with Linux and Windows, including server building and OS-based operations.
Strong skills in partnering across IT and business lines to deliver and enhance Data Protection services.
Familiarity with security regulations and frameworks (MITRE, CIS CSC, SOX), as well as NIST, IANA, RFCs, and IETF.
Experience with HIPS clients, firewall rules, secure configurations, Linux, Network, and Windows commands.
Proficiency in Python, BASH, PowerShell, and Ansible.
Understanding of Java, JSON, XML, YAML, and Object-Oriented Programming and Design Patterns.
Strong understanding of source code repository tools (e.g., GIT).
Foundation in Secure Software Lifecycle Management and Vulnerability Management.
Strong debugging and troubleshooting skills.
Basic understanding and experience in supporting ITIL activities like Incident and Problem Management.
Knowledgeable in network ports, protocols, and firewalls.

Nice To Haves

Security certifications preferred.
Self-motivated problem solver with innovative thinking.
Effective communicator and collaborator within teams and with external entities.
Ownership mindset with a proactive approach to problem-solving.
Eagerness to learn new technologies and improve processes.
Detail-oriented with a strong understanding of change impacts.
Familiarity with ITIL guidelines and risk-based prioritization.
Emphasis on automation and compliance with controls.
Adaptability to change while meeting objectives.
Strong mentorship and communication skills.

Responsibilities

Providing administration, engineering, and operations support for PKI application components, and cryptographic-based tools within Data Protection.
Reducing information risk by ensuring and enhancing the Confidentiality, Availability, and Integrity of Information systems at Freddie Mac.
Working towards the development and delivery of technical solutions related to Data Protection.
Building, developing, and maintaining relationships with internal and external customers, and vendors to formulate remediation solutions for issues related with Information Security.
Managing product lifecycles and ensuring thorough testing of upgrades.
Implementing new products and overseeing large-scale upgrades.