{"id":3958437,"url":"https://alion.io/job/citi-pki-engineer-advanced-cryptographic-security-pqc","title":"PKI Engineer - Advanced Cryptographic Security (PQC)","company":{"id":7841,"name":"Citi","domain":"citi.com","url":"https://alion.io/company/citi","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":97,"open_postings":578,"ghost_share":0.01,"stale_share":0.265,"repost_share":0.066,"time_to_fill_p50_days":9,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Budapest, Hungary"],"countries":["HU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bouncy Castle","optional":false},{"name":"C#","optional":false},{"name":"CloudFormation","optional":false},{"name":"GCP","optional":false},{"name":"Java","optional":false},{"name":"liboqs","optional":false},{"name":"Linux","optional":false},{"name":"OpenSSL","optional":false},{"name":"PKI","optional":false},{"name":"Python","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"Spring Boot","optional":false},{"name":"Terraform","optional":false},{"name":"Unix","optional":false},{"name":"Wi-Fi","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-11-09T10:03:08Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-11T14:24:43Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Apply for our newly opened role in our growing PKI/Crypto Engineering team in Budapest!\nThe purpose of this role is to architect, develop and engineer emerging Cryptography, PKI, and Post-Quantum Cryptography (PQC) Capabilities, build enterprise middleware integrations using Java alongside existing team members fulfilling Citi’s Cybersecurity requirements, policies, and standards at all times.\nYou will be working with the best-in-class engineering team and will develop large-scale enterprise security solutions using advancements in quantum-resistant architectures with an opportunity to work with advanced mathematical primitives.\nThis is a Developer role with strong hands-on experience in Public Key Infrastructure, Network Security, Certificate based Remote Attestation (may include confidential computing) and Linux systems.\nYou will lead initiatives on emerging technology and the exciting area of next-generation quantum-safe security ecosystems.\nThe job will also involve working with advancing cloud designs using well-architected frameworks and is generally known to provide good job satisfaction for the right candidate meeting our Citi and team culture fitness requirements.\nResponsibilities:\nArchitect and develop solutions at the enterprise level, which will include working on cryptographic architectures with main focus on advancing the PKI & certificate lifecycle management engineering & automation landscape.\nWork with all disciplines, senior architects, and operational product owners to integrate quantum-resilient PKI, hybrid certificate architectures, and certificate management technologies with Citi platforms to protect and manage the cryptography of mission-critical systems.\nPerform product evaluation, testing, benchmarking, and certification of PKI, and HSM cryptographic technologies. Ensure that all security products meet or exceed Citi Standard requirements .\nProvide occasional 4th level support and technical leadership for the product toolset.\nProduce high-level and low-level architectural documentation of processes, procedures, and migration roadmaps for the usage of cryptographic products.\nFollow the Technology Development Life Cycle in the development of all security tools.\nQualifications:\n 6-10 years relevant experience in working with PKI and CLM engineering (Ops and Cloud Coordinators please excuse)\nAdvanced understanding of Microsoft Windows operating systems and Linux / Unix environments\nDeep understanding of cryptographic protocols (TLS 1.3 hybrid key exchange, mTLS, SSH, IPsec) and X.509 standards\nStrong Object-Oriented Programming Experience with hands-on Java development (Java 17/21, Spring Boot)\nProgramming in Python and C#\nFluency in English\nIn-depth knowledge and hands-on usage of Crypto Libraries (Bouncy Castle PQC APIs, OpenSSL / liboqs, JCA/JCE providers)\nSound security engineering principles as background to understanding the inner workings of the Email Security, User Certs, Device Certs, Smart Hub and Wifi system certs, Standalone device certs , its automated lifecycle, and controls that form an enterprise security ecosystem\nGood familiarity with NIST 800-57 part 1 rev 6 and NIST IR 8547\nCloud Key Management and Infrastructure (AWS KMS/CloudHSM, GCP KMS/EKM, Azure Key Vault, Terraform/CloudFormation)\nMust be familiar with information security concepts\nA sound knowledge of secure development technologies, object-oriented programming, and shift-left security practices is required.\nEducation:\nBachelor’s degree/University degree\nMaster’s degree preferred\nWhat we can offer:\nBy joining Citi Hungary, you will not only be part of a business casual workplace with a hybrid working model (up to 2 days working at home per week), but also receive a competitive compensation package and enjoy a whole host of additional benefits that support you (and your family) to be well, live well and save well:\nCafeteria Program\nHome Office Allowance (for colleagues working in hybrid work models)\nPaid Parental Leave Program (maternity and paternity leave)\nPrivate Medical Care Program and onsite medical rooms at our offices\nPension Plan Contribution to voluntary pension fund\nGroup Life Insurance\nEmployee Assistance Program\nAccess to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed\nFlexible work arrangements to support you in managing work - life balance\nCareer progression opportunities across geographies and business lines\nSocially active employee communities with diverse networking opportunities\nAlongside these benefits Citi is committed to ensuring our workplace is where everyone feels comfortable coming to work as their whole self every day. We want the best talent around the world to be energized to join us, motivated to stay, and empowered to thrive.\n#LI -OD1\n------------------------------------------------------\nJob Family Group:\nTechnology------------------------------------------------------\nJob Family:\nSystems & Engineering------------------------------------------------------\nTime Type:\nFull time------------------------------------------------------\nPrimary Location Full Time Salary Range:\n17 157 800,00 Ft - 28 767 800,00 Ft------------------------------------------------------\nMost Relevant Skills\nPlease see the requirements listed above.------------------------------------------------------\nOther Relevant Skills\nFor complementary skills, please see above and/or contact the recruiter.------------------------------------------------------\nCiti is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.\nIf you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.\nView Citi’s EEO Policy Statement and the Know Your Rights poster.","description_format":"text","description_chars":6047,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Cafeteria","Flexible schedule","Home office","Hybrid work","Life insurance","Parental leave"],"hiring_locations":[{"name":"Hungary","iso":"HU","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cards & Card Issuing","Wealth Management & Financial Advisors","Payment Processing & Gateways","Investment Banking & M&A Advisory"],"lifecycle":[{"event":"open","at":"2026-11-09T10:03:08Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":9,"reasons":["conf:4","velocity","win:early","comp:brand"],"computed_at":"2026-11-11T05:49:22Z"},"pay":null,"html_url":"https://alion.io/job/citi-pki-engineer-advanced-cryptographic-security-pqc","json_url":"https://alion.io/job/citi-pki-engineer-advanced-cryptographic-security-pqc.json","meta":{"generated_at":"2026-11-11T17:57:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":34413,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7841},"rest":"https://alion.io/mcp/rest/get_company?id=7841"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fciti-pki-engineer-advanced-cryptographic-security-pqc"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fciti-pki-engineer-advanced-cryptographic-security-pqc"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fciti-pki-engineer-advanced-cryptographic-security-pqc"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/citi-pki-engineer-advanced-cryptographic-security-pqc\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fciti-pki-engineer-advanced-cryptographic-security-pqc"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3958437}},{"tool":"search_jobs","arguments":{"company":"citi.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3958437},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}