About this job

Sapienza Consulting, a tpgroup company, is recruiting a Public Key Infrastructure (PKI) Services for NATO – NCIA in Brussels, Belgium.

Responsibilities

• Develop PKI Certificate Profiles for a cryptographic key distribution and management system (KDMS) and for the NATO Key Management Interoperability Specification (NKMIS), an interoperability specification between KDMSs and End Cryptographic Units (ECUs)
• Manage and adjudicate comments to the Certificate Profiles until they are approved
• Deliverables: Comments collected and adjudicated and new version of Certificate Profiles submitted for comments by 15 July 2022
• Collect and adjudicate the 2nd round of comments by 30 September 2022
• Collect and adjudicate additional rounds of comments, or submit documents for C3 Board approval by 30 November 2022
• Attend NKMIS and KDMS working group meetings as required
• Certificate Policies (CertP) revisions: Revise the NATO High Assurance PKI Certificate Policy, In particular, to include support to ECUs
• Manage and adjudicate comments to the Certificate Policy until it is approved
• Revise the NATO PKI (Medium Assurance) Certificate Policy as required, to maintain coherence the two certificate policies
• Manage and adjudicate comments to the Certificate Policy until it is approved
• Lead the CertPs writing team meetings
• Collect and adjudicate comments on the revised CertPs
• Deliverables: Develop an initial revised draft of the Certificate Policies by 15 July 2022
• Organize and lead the first writing team meeting by 20 September 2022
• Organize and lead subsequent meetings as required
• Submit revisions for NATO PKI Advisory Group (NPAG) approval by 15 December 2022
• Support the Federated Mission Networking (FMN) PKI syndicate in their PKI interoperability work
• Deliverables: Attend all FMN PKI syndicate meetings
• Submit coordinated responses to FMN PKI issues within 10 working days
• Support the revision of the NATO PKI interoperability framework and directive
• Provide support to the revision of the PKI interoperability framework and develop a first draft revision of the PKI interoperability directive
• Deliverables: attend all PKI interoperability framework meetings and publish the Meeting Record within 10 working days after the meeting
• Collect and assist in adjudicating NPAG comments on the interoperability framework by 15 July 2022
• Collect and adjudicate the 2nd round of comments by 30 September 2022
• Collect and adjudicate additional rounds of comments, or submit documents for C3 Board approval by 15 December 2022
• Review PKI interoperability agreements and assist in the interoperability process
• Deliverables: Assess and decide on PKI Interoperability agreements within 10 working days of receipt
• Write and staff the PKI interoperability letter and provide it to the PKI counter-party and ACO within 10 working days
• Other PKI tasks may be assigned as required

Profile

• Required Security Clearance: NATO Secret
• The contractor must have the knowledge and multiyear experience in PKI at the policy level
• This knowledge and profile would be in developing or revising Certificate Policies, Certification Practices Statements and Certificate Profiles
• The contractor must have familiarity with concepts of cryptography and cryptographic key management
• The direct cryptographic profile is desirable
• The contractor must have knowledge of PKI standards and interoperability frameworks, such as the IETF RFCs and CA/Browser Forum baseline requirements
• The contractor must have excellent English writing skills and the ability to brief their work in English
• It is desirable that the contractor has practical experience administrating a PKI Certification Authority
• It is desirable that the contractor has a profile leading small groups or writing teams

If you are interested in applying then please click apply and one of the recruitment team will be in touch

For information on how we process the personal data in your application, please see the Sapienza Privacy Statement