About this job

Sapienza Consulting, a tpgroup company, is recruiting Public Key Infrastructure (PKI) Services for NATO – NCIA in Brussels, Belgium.

Responsibilities

• Develop PKI Certificate Profiles for cryptographic key distribution and management system (KDMS) and for NATO Key Management Interoperability Specification (NKMIS), interoperability specification between KDMSs and End Cryptographic Units (ECUs)
• Manage and adjudicate comments to Certificate Profiles until they are approved
• Deliverables: Comments collected and adjudicated and new version of Certificate Profiles submitted for comments by 15 Jul 2022
• Collect and adjudicate 2nd round of comments by 30 September 2022
• Collect and adjudicate additional rounds of comments, or submit document for C3 Board approval by 30 Nov 2022
• Attend NKMIS and KDMS working group meetings as required
• Certificate Policies (CertP) revisions: Revise NATO High Assurance PKI Certificate Policy. In particular to include support to ECUs
• Manage and adjudicate comments to Certificate Policy until it is approved
• Revise NATO PKI (Medium Assurance) Certificate Policy as required, to maintain coherence the two certificate policies
• Manage and adjudicate comments to Certificate Policy until it is approved
• Lead CertPs writing team meetings
• Collect and adjudicate comments on revised CertPs
• Deliverables: Develop initial revised draft of Certificate Policies by 15 July 2022
• Organize and lead first writing team meeting by 20 September 2022
• Organize and lead subsequent meetings as required
• Submit revisions for NATO PKI Advisory Group (NPAG) approval by 15 December 2022
• Support Federated Mission Networking (FMN) PKI syndicate in their PKI interoperability work
• Deliverables: Attend all FMN PKI syndicate meetings
• Submit coordinated responses to FMN PKI issues within 10 working days
• Support revision of NATO PKI interoperability framework and directive
• Provide support to revision of PKI interoperability framework and develop first draft revision of PKI interoperability directive
• Deliverables: attend all PKI interoperability framework meetings and publish Meeting Record within 10 working days after meeting
• Collect and assist in adjudicating NPAG comments on interoperability framework by 15 July 2022
• Collect and adjudicate 2nd round of comments by 30 September 2022
• Collect and adjudicate additional rounds of comments, or submit document for C3 Board approval by 15 December 2022
• Review PKI interoperability agreements and assist in interoperability process
• Deliverables: Assess and decide on PKI Interoperability agreements within 10 working days of receipt
• Write and staff PKI interoperability letter and provide to PKI counter-party and ACO within 10 working days
• Other PKI tasks may be assigned as required

Profile

• Required Security Clearance: NATO Secret
• Contractor must have knowledge and multiyear experience in PKI at policy level
• This knowledge and profile would be in developing or revising Certificate Policies, Certification Practices Statements and Certificate Profiles
• Contractor must have familiarity with concepts of cryptography and cryptographic key management
• Contractor must have knowledge of PKI standards and interoperability frameworks, such as IETF RFCs and CA/Browser Forum baseline requirements
• Contractor must have excellent English writing skills and ability to brief their work in English
• It is desirable that contractor has practical experience administrating PKI Certification Authority
• It is desirable that contractor has profile leading small groups or writing teams
• Direct cryptographic profile is desirable

If you are interested in applying then please click apply and one of the recruitment team will be in touch.

For information on how we process the personal data in your application, please see the Sapienza Privacy Statement.