Entrust Nshield Hsm Infrastucture Specialist

il y a 4 semaines

Brussels, Belgique ComTech Europe Limited Temps plein

The IOS domain has purchased 5 nShield General Purpose hardware security modules (model number NH2075-B) from Entrust.
To use these HSMs in a broader PKI context, IOS is looking for an Entrust nShield Certified specialist who can assist with the following tasks:
Automation of Security World creation and associated Administrator Card Set and Operator Card Sets (this must be done according to industry best practices on 3 different environments spread over 2 data centers based on the requirements described below); o the supplier can make better proposals than those in the requirements if he feels that they correspond better to industry best practices. It is up to the supplier to clearly indicate this in the proposal, such as for initialization, providing a key ceremony with associated documentation
Documenting and developing a demo regarding PKCS 11 integration. This with the intention to stimulate reuse with different software in use within the DG VD such as Axway API Gateway, AppViewX, Forgerock AM, HashiCorp Vault Requirements for automation: Create Active-Passive RFS "cluster" Reset existing Security World (if present) Create new FIPS 140-2 Level 3 compliant Security World o Set AES as preferred cipher suite
In parallel ECC to be used as well as possible given the efficiency that comes with it o Set 3/6 quorum for all operations (PIN reset, NVRAM access, RTC access, etc.) o Set active-backup network connection o Set 3 different NTP Servers stratum 0 NTP Servers: ntp-a.fediap.be, ntp-b.fediap.be, and ntp-c.fediap.be o Set audit registration o Set remote management o Set remote reboot o Set auto-push config o Make module 1 a valid target for remote shares
**when a cluster is already present**: connect to existing Security World 025/BOSA/90533/DEF/V1.0/SUPPORT MISSION HSM 06/02/2025 7 INFRASTRUCTURE SPECIALIST
Create 3 2/5 quorum persistent OCS o Set a timeout of 300 seconds o Set passphrase replacement/PIN recovery
enforce passphrase complexity for ACS and OCS
All steps should be logged to provide evidence of correct execution Ideally, automation steps should be reusable to enable, for example, automated reinitialization of an HSM in a Security World after a firmware upgrade.

  • Pki System Architect

    il y a 2 jours

    Brussels, Belgique Vector Synergy Temps plein

    **Location**: Brussels, Belgium **Skills, knowledge, experience required**: - Experience with one or more of the following technologies: - Red Hat Enterprise Linux (RHEL) 7/8; - MS Windows Server 2016/2019; - Thales/SafeNet/Gemalto appliance such as: - SafeNet Luna SA5/SA7 Hardware Security Module (HSM); - Smart card; - Entrust/Safelayer: - Entrust...

  • Software Architect

    il y a 5 jours

    Brussels, Belgique Worldline Temps plein

    Job Description - Software Architect (M/F/d) **This is worldline** We are the innovators at the heart of the payments technology industry, shaping how the world pays and gets paid. The solutions our people build today power the growth of millions of businesses tomorrow. From your local coffee shop to unicorns and international banks. From San Francisco to...

  • Information Security Management Specialist

    il y a 6 jours

    Brussels, Belgique Vector Synergy Temps plein

    **Location**: Brussels, Belgium **Security Clearance**: EU Confidential **Introduction**: Information Security Management Service aims to ensure the confidentiality, integrity, and availability of the Contracting EU Institutions’ (EU-Is') information, data, and ICT services. This service relies on the identification of the Contracting EU-I's assets...