Responsibility for Central Public Key Infrastructure (PKI) as a key technical point for cryptographic security and digital identities in the public network

safe, high-availability operation and further development of the complex PKI identity infrastructure using enterprise technologies, in this context, participation in architecture and security concepts in joint exchange with network, security and service teams

Analysis and assessment of new technical and technical requirements in the PKI environment, including the introduction of qualified legally secure digital signatures, the connection of external IT service centres, and highly secure integration of cloud and hybrid infrastructures

technical and professional control of external manufacturers and service providers – from the creation and testing of performance descriptions in the context of tender procedures to active support and quality assurance in implementation projects

continuous development and standardization of lifecycle processes in the sense of a modern, sustainable PKI infrastructure

successfully completed studies (Bachelor or equivalent degree) in the field of (economic) informatics, communication technology or another relevant field of study or comparable experience and skills in the form of proven multiannual and relevant professional experience with relevant training evidence and comprehensive knowledge of the technologies used in the field of work Multiannual experience in the design and operation of PKI and identity solutions in enterprise environments as well as deep understanding of cryptographic protocols, certificate standards (X.509) and authentication protocols (802.1 X, TLS, Kerberos, SAML/OIDC) as well as certificate management protocols (ACME, CMP, SCEP) very good experience with EJBCA, HSM, AD-Certificate Services or comparable PKI platforms with integrated certificate and key management and sound knowledge in the field of digital signatures, smart card based authentication (smartcards, eIDAS, S/MIME) well-founded practical experience in the administration and configuration of central email services (especially MS Exchange) as well as the connection of specialist applications to the e-mail infrastructure Experience and knowledge in MS Windows Server, Active-Directory and DNS as well as in the creation of group and security policies, standards as well as audit-proof logging, monitoring and documentation safe handling of scripting languages (PowerShell, Python) to automate certificate and directory tasks Conceptual strength and ability to translate complex security requirements into scalable and manageable architectures Advantageous knowledge of the application of classified information (VSA) and BSI basic protection Structured, independent working Experience in cooperation with interdisciplinary teams (network, security, operation) and strong team and communication skills as well as high sense of responsibility and service German language skills indispensable (safe for negotiation – level C1) as well as good English language skills (level B1) – (data on the level of competence according to the Common European Framework of Reference for Languages) absolute secrecy and willingness to participate in an extended safety review with security determinations according to § 10 Security review law

Even if you are currently still studying or studying, continuing or continuing education, and the degree is immediately ahead, your application is welcome! For foreign educational qualifications, we need proof of equivalence with a German degree (see Central Office for Foreign Education (ZAB) at https://www.kmk.org/zab or the ANABIN database). We are convinced that diverse teams can achieve better results. We are therefore looking forward to applications for persons of any origin, religion, worldview, sexual identity or orientation and regardless of existing disabilities. We expressly encourage people with immigration history to apply. We understand ourselves as a family-friendly employer and therefore welcome applications from people with family obligations. The workplace to be occupied is in principle suitable for occupation in the form of job sharing and also for part-time employment, as long as there is a need to perform tasks. It is therefore examined whether part-time requests can be met within the framework of the services. The Federal Chancellery guarantees the professional equality of women and men. severely disabled people are preferably taken into account with the same suitability; only a minimum of physical fitness is required. The activities to be carried out shall enable, in the presence of the personal conditions, a grouping up to the remuneration group 12 TVöD. The level assignment depends on your professional experience and your previous career. We can offer you an annual salary (brutto) of up to 90,100 euros (from May 2026 to 92,500 euros incl. ministerial allowance). Depending on the applicant's situation, the payment of an additional temporary allowance of up to 1,500 euros per month is possible for employees of the tariff. In addition, employees receive an occupational pension scheme via the Federal and Länder pension fund. In the event of personal conditions, a subsequent appeal may be made to the civil service. If you are already employed in the public service, or if you are an official (until grade A 13 g, without an official allowance), you will be entitled to a dismissal/resignation with the aim of the transfer or The aim is to take over. We offer a good “work-life balance” with flexible working hours and the possibility of working in the home office as part of the service conditions, as well as 30 days of recreational leave per calendar year. In addition, we can provide you with up to 18 days of time compensation within one year for the corresponding time balance. In addition to its convenient location, the Federal Chancellery can also provide a very good connection to the ÖPNV. We also offer a monthly employer grant to the VBB company ticket/Germany ticket job. It offers targeted integration, individual further training and a multifaceted work environment with diverse and exciting topics as well as space for implementing own ideas and personal development opportunities in a dedicated and motivated team. .