Job description

Company culture :

AFD.Tech fosters a deeply human and collaborative culture, built on trust, team spirit, and mutual support.
Employees grow within a close-knit environment where hands-on managers guide, mentor, and empower their teams.
This people-focused approach is strengthened by a solid organizational structure, ensuring consistency, quality, and operational excellence.
Innovation and creativity play a supportive role, while performance and challenge are present but balanced.

The position

As part of the development of our Cybersecurity & Security Infrastructure activities, we are looking for PKI, HSM, and WAF Engineers to strengthen our teams in expertise, operation, and governance of security services.

You will work on critical environments to ensure the security of digital identity management infrastructure, certificates, cryptographic keys, and internet-facing applications.

Depending on your experience level, you will be responsible for operational exploitation, advanced administration, or technical governance of PKI, HSM, and WAF platforms.

Your main tasks:
PKI & Certificate Lifecycle Management:

• Administer Public Key Infrastructures (PKI).
• Manage the certificate lifecycle: issuance, renewal, revocation, and supervision.
• Maintain Certification Authorities (CAs) and associated validation mechanisms.
• Monitor certificate inventories and expirations.
• Participate in compliance operations and security audits.
• Implement and maintain operational procedures and technical documentation.

HSM and Cryptography Management:

• Administer HSM platforms and key management infrastructures.
• Participate in key management ceremonies and cryptographic rotation operations.
• Ensure the operational maintenance of HSM environments.
• Ensure compliance with cryptographic standards and requirements.
• Analyze and resolve incidents related to certificates, keys, and cryptographic infrastructures.
• Contribute to the continuous improvement of security and governance processes.

Web Application Firewall (WAF):

• Administer and evolve application protection platforms.
• Design, deploy, and maintain WAF security rules.
• Analyze security alerts and adjust protection mechanisms.
• Manage exceptions, false positives, and change requests.
• Support application teams during the integration of new applications.
• Participate in improving protection against web and API threats.

Architecture, Governance & Expert Support (Senior Profiles)

• Design PKI architectures and trust models.
• Define standards related to certificates, cryptographic algorithms, and key management.
• Provide Level 3 support for complex incidents.
• Perform root cause analyses (RCA) and manage improvement plans.
• Produce architecture documents, procedures, and runbooks.
• Participate in security reviews and change management processes.
• Support technical teams and share your expertise.

Education & Experience:

PKI & Certificate Engineer:

• 3 to 5 years of experience in a PKI environment.
• Experience in certificate lifecycle management.
• Knowledge of SSL/TLS standards and X.509 certificates.
• Proficiency in a PKI administration platform (EJBCA or equivalent).
• Good understanding of cryptographic principles.

Senior PKI & HSM Engineer:

• More than 6 years of experience in PKI and HSM infrastructures.
• Expertise in PKI architecture design.
• Proficiency in certification authorities, CRL, OCSP, and certificate policies.
• Significant experience with HSM solutions such as:

1. Thales Luna
2. CipherTrust
3. Entrust

• Solid knowledge of cryptography:

1. RSA
2. ECC
3. TLS 1.2 / TLS 1.3
4. PKCS#11

• Experience in governance and risk management related to cryptographic infrastructures.

WAF Engineer:

• Minimum 5 years of experience in WAF solution administration.
• Proficiency in one or more platforms:

1. Ubika / DenyAll
2. F5 ASM
3. Imperva
4. FortiWeb
5. Cloudflare WAF

• Good knowledge of application risks and web vulnerabilities.
• Experience in securing APIs and exposed applications.
• Ability to design, maintain, and optimize application protection policies.

Technical skills sought:
PKI & Certificates:

• Enterprise PKI
• EJBCA
• X.509
• CRL
• OCSP
• TLS / SSL
• Certificate lifecycle management

HSM & Cryptography:

• Thales Luna
• CipherTrust
• Entrust
• RSA
• ECC
• PKCS#11
• Key Management
• Cryptographic audit and compliance

WAF & Application Security:

• Ubika / DenyAll
• F5 ASM
• Imperva
• FortiWeb
• Cloudflare WAF
• OWASP Top 10
• API Security
• Reverse Proxy
• Application protection

Automation & Integration:

• Python
• Shell Scripting
• SIEM
• API Security
• Cloud KMS
• Azure Key Vault
• Google Cloud KMS

Appreciated skills:

• Integration of WALLIX PAM.
• Cloud Security and key management in the cloud.
• Integration of WAF with SIEM platforms.
• Securing APIs and cloud-native architectures.
• Governance & Compliance.

Qualities sought:

• Strong awareness of cybersecurity issues.
• Excellent analytical and investigative skills.
• Rigor and attention to detail.
• Autonomy and initiative.
• Ability to work on critical environments.
• Good writing and documentation skills.
• Team spirit and knowledge sharing.

Appreciated certifications:

• CISSP
• ITIL Foundation
• Thales or Entrust Certifications
• Security+
• Certified Cloud Security Professional (CCSP)
• Certifications related to WAF solutions

Your optimal candidate journey, in 10 days maximum!
 

1.  A first exchange by phone and Teams (or at our offices) with a member of the People & Project team to discuss your profile, the position, and the company
2.  A second interview with a Business Manager or a Technical Expert (by Teams or at our offices)

Responsiveness, paced exchanges, an optimal candidate experience guaranteed with an offer within 10 days maximum.

Reasons to join AFD.Tech part of Accenture, and all our benefits:

• Benefit from personalized support from your 1st day with our Onboarding team and your future Manager (welcome at our Rabat offices, Onboarding day, friendly breakfast).
• Develop your technical, functional, or management skills through the Accenture training catalog and specialized training thanks to our school partnerships.
• Advance your career through our mobility policy.
• Have extraordinary experiences with regular events and a family atmosphere (Nintendo Switch Tournament, Photo Shoots, Monthly Birthdays, football tournament (CAM), Coaching and personal development, Top cake, Barbecue Day, Board Games, annual party...)
• Our recruitment is based on skills, without distinction of origin, age, or gender, and all our positions are open to people with disabilities.