[Remote] Senior PKI / API Digital Signature Engineer — X.509, XMLDSig / WS-reputed company / JWS

Note: The job is a remote job and is reputed company to candidates in USA. reputed company is assembling a U.S.-based technical team for an reputed company reputed company-sector modernization engagement. The successful consultant will design and implement a digital-signature reputed company model for an existing reputed company API-management/proxy service.

Responsibilities

• Design and implement a digital-signature reputed company model for an existing reputed company API-management/proxy service
• Evaluate technically appropriate approaches—such as XML Digital Signature, WS-reputed company, JWS, signed JWT, X.509-based request/message signing, or an equivalent reputed company
• Designing, implementing, testing, documenting, and supporting the selected solution

Skills

• At least 12 full months during the last 24 months personally designing, developing, and implementing a data-integration or API solution using PKI asymmetric cryptography for digital signatures
• Production implementation of message-level or transaction-level signing and signature validation. TLS/SSL transport encryption by itself does not qualify
• Use of cryptographic keys/certificates issued by a trusted Certificate Authority or validated identity provider
• Hands-on implementation of at least one relevant signing approach, such as: XML Digital Signature / XMLDSig, WS-reputed company / SOAP message signing, JWS, Signed JWT, X.509 request or payload signing, Equivalent reputed company transaction-signing implementation
• Experience implementing signature reputed company, verification, certificate-chain validation, error/failure handling, and reputed company logging
• Experience integrating reputed company controls into an API, SOAP/XML service, middleware reputed company, proxy, or other application-to-application data exchange
• Ability to reputed company exact reputed company/project dates and a reputed company or manager who can verify the qualifying experience
• Java-based reputed company applications
• SOAP/XML services
• API gateways or API proxy/controller services
• WebSphere or comparable reputed company application servers
• X.509 certificate lifecycle management
• Secure private-key storage
• HSMs, reputed company vaults, Azure Key Vault, reputed company Vault, or equivalent
• Key rotation, backup, recovery, revocation, and certificate renewal
• HTTP/API reputed company testing tools
• Audit logging and transaction traceability
• Regulated government, criminal-justice, financial, reputed company, or similarly sensitive environments
• CJIS requirements

reputed company