About the position
The world is transforming - and so is Intel. Intel is a company of bold and curious inventors and problem solvers who create some of the most astounding technology advancements and experiences in the world. With a legacy of relentless innovation and a commitment to bring smart, connected devices to every person on Earth, our diverse and brilliant teams are continually searching for tomorrow's technology and revel in the challenge that changing the world for the better brings. We work every single day to design and manufacture silicon products that empower people's digital lives. Come join us and do something wonderful. Who we Are: Intel's Information Security organization enables Intel to provide secure products, solutions, and services which meet U.S. regulatory requirements. The Information Security organization supports the unique IT information Security and Compliance requirements for Intel Federal projects that deliver products and/or services to the US Government (USG). As part of this team, you will help us grow our secure solution suite to meet U.S. Government requirements. The Intel Information Security organization is seeking a Network Security Engineer. The candidate chosen for this role will assist senior engineers with design, architecture, and build of secure classified network products to support USG operations.
Responsibilities
- Design, deploy, and manage enterprise-grade PKI solutions.
- Lead certificate lifecycle management efforts using EJBCA.
- Automate PKI-related tasks and processes.
- Collaborate with security, infrastructure, and DevOps teams to integrate PKI solutions with various platforms and applications.
- Develop and enforce policies, standards, and best practices for certificate issuance, renewal, and revocation.
- Monitor PKI infrastructure health, availability, and compliance with internal and regulatory requirements.
- Troubleshoot PKI-related issues including certificate chain validation, CRL/OCSP configurations, and encryption/signing issues.
- Provide documentation, technical guidance, and training to internal teams.
- Business travel is required as needed.
- Ability to thrive in dynamic and fast-paced environments.
Requirements
- Verification of U.S. citizenship due to citizenship-based legal restrictions.
- The ability to obtain and maintain a US Government Security Clearance.
- High School /Equivalent Diploma with at least one of the following security certifications: CISSP, CEH, SSCP OR Bachelor's degree and 2 years of applicable experience.
- 2+ years of experience in scripting for automation and configuration management.
- Strong understanding of certificates (X.509), certificate authorities (CAs), OCSP, CRLs, and SSL/TLS protocols.
Nice-to-haves
- Active US Government Top Secret (TS) Security Clearance with the ability to obtain and maintain SCI access.
- Bachelor's degree in Systems Engineering, Cyber Security Engineering, Computer Engineering, Computer Science, Information Systems, or similar discipline and four years of work-related experience; or an equivalent combination of education and experience.
- Experience with DoD security implementation (e.g. STIG) and security tools for managing the environment.
- Experience with business continuity and disaster recovery.
- Experience with secure coding and encryption techniques.
- Experience with network analysis software such as Sniffer, Wireshark, or Microsoft Network Monitor or Bro/Zeek.
- Experience with log management and analysis tools such as Splunk, ELK, DataDog or similar.
- Experience utilizing Kubernetes/Docker for support of CI/CD and autoscaling containerized applications.
- Experience with CI/CD tools (GitHub Actions, GitLab CI, Jenkins, etc.).
- Familiarity with HSMs, and certificate enrollment (e.g., SCEP, EST, ACME).
Benefits
- Competitive pay
- Stock options
- Bonuses
- Health benefits
- Retirement plans
- Vacation
