Job type
- Full-time
Job description
- Protect and maintain the confidentiality of all documents, data, and proprietary information.
- Work independently on assigned tasks while providing expert advice and technical support to the project team.
- Return all DND materials and property upon completion of the contract or specific tasks.
- Safeguard all documentation and sensitive materials in secure facilities or locked cabinets.
- Participate in meetings, working groups, technical reviews, consultations, teleconferences, and coordination sessions with internal and external stakeholders, as directed by the Technical Authority.
- Develop and maintain detailed work plans, schedules, and progress tracking for assigned deliverables.
- Provide expert advice and guidance on PKI considerations for application systems under development.
- Develop PKI policies, standards, guidelines, and procedures supporting departmental IT Security and Cyber Protection objectives.
- Review and assess existing PKI documentation (policies, standards, guidelines, and procedures) and provide recommendations for improvement, alignment, and effectiveness.
- Develop and maintain Certificate Policies and Certification Practice Statements and conduct compliance inspections and audits against these policies.
- Analyze and assess the application of PKI architecture, digital signatures and certificates, PKI products, Internet security protocols, directory standards, certificate protocols, and Certification Authority (CA) operations.
- Conduct interoperability and governance assessments for PKI systems and supporting infrastructure.
- Design PKI frameworks and implement the PKI infrastructure necessary to protect Departmental assets and support secure application systems.
- Perform compliance audits of PKI related operations, application systems, and infrastructure.
- Review and evaluate PKI related backup, recovery, and business continuity plans.
- Investigate PKI related incidents, identify root causes and vulnerabilities, and recommend corrective actions.
- Support activities and initiatives directly contributing to the Departmental IT Security and Cyber Protection Program.
- Develop and deliver PKI awareness and training programs tailored to Departmental personnel.
- Develop and deliver technical training, briefing materials, and presentations related to IT security engineering and PKI operations.