Cryptography Developer

As a Crypto Engineer with strong consultancy skills and competences, you are part of a Scrum Team (SAFe) managing and operating our IAM

Crypto landscape. The Crypto environment is newly setup within the IAM. Originally it was “only“ PKI, Key-Management is now added and we are

working on implementing a new CLM.

The team is owning the technical design, development and operation of cryptography and everything related to certificates. Automation is a key

strategy of ASML IT, enhanced by self-service to provide our users a seamless experience without sacrificing security.

As a Crypto Engineer you work closely together with the Product Owner, Scrum Master and the IAM System Architect.

Job Description

Main responsibilities

Supporting questions from PKI users

Handling certificate requests

Developing current and future landscape which include a to-be integrated CLM tool

Contributing to the roadmap set out by the (Chief) Product Owner

Validation and implementation of functional and non-functional requirements in agreement with business / IT principles and practices

Develop and configure new functionality in line with the IAM architectural principles, the IAM strategy and the standard IAM processes

Drive standardization and automation

Coordinate and validate the realization of designed capabilities/functionalities according to the specifications

Actively participate in the Agile/ SAFe events

Requested Skills

Professional experience with crypto/ PKI, certificates, OpenSSL, TLS stacks, protocols such as SCEP, EST, ACME, cryptography, knowledge

of algorithms such as RSA, DSA, ECC, DH

Professional experience with supporting users, handling crypto/ PKI related incidents, writing concise documentation and contributing with the

development of a maturing PKI landscape

Experience with Active Directory, Active Directory Certificate Services, NDES, cloud technologies, symmetric algorithms such as AES are a

must have, experience with and Azure AD, Azure Key Vault, CyberArk, HSM’s

You are familiar with and have hands-on experience with most of the products mentioned, e.g. PGP/GPG, Docker, Git, GitLab, Terraform,

Ansible, Python and RESTful API’s;

Experience working with Windows, Linux, networking technologies such as DNS and TCP;

Experience with working in an Agile environment and working DevOps, preferably with Scrum and SAFe

Able to develop and implement CI/CD based automationPreferred experience with scripting languages like PowerShell, Bash or Python

Capable of identifying improvements in test and development processes and used technology

Sound understanding of security, e.g. technologies used, best practices, and security policy frameworks;

Personal skills

Highly-motivated, with a strong work ethic and able to work effectively under minimal supervision

Highly motivated to help users and provide professional services conforming to the ASML service framework

Excellent English communication and presentation skills

Excellent verbal and written communication skills

Assertive attitude

Nimble Learning/ Learning based on experimentation

Education and Certifications

Master degree or Bachelor degree in a technical area

Valid industry certifications such as, CISSP, CCSP, or CISM are a plus

You are in possession of a valid work permit for The Netherlands.