
Information Security Specialist, AVP
at Deutsche Bank
Posted 18 days ago
No clicks
- Compensation
- Not specified
- City
- Pune
- Country
- India
Currency: Not specified
Join Deutsche Bank's Cryptography Engineering and Solutions team within the Chief Security Office to design and automate certificate management for GCP services. You will build and maintain CertHub integrations, automate onboarding and renewal workflows for GKE, load balancers, Google Secret Manager, Cloud Functions, Apigee and other GCP components. The role involves implementing automated certificate provisioning and truststore management, troubleshooting production certificate issues, and contributing to backend microservice and pipeline improvements. You will also guide application teams on onboarding and support migrations between on‑prem PKI and GCP CertHub workflows.
Information Security Specialist, AVP
| Job ID: | Full/Part-Time: Full-time |
| Regular/Temporary: Regular | Listed: 2026-02-06 |
| Location: Pune | |
Position Overview
Job Title: Information Security Specialist, AVP
Location: Pune, India
Corporate Title: AVP
Role Description
- The Cryptography Engineering and Solutions team at Deutsche Bank, operating under the Chief Security Office (CSO), defines the bank’s cryptography strategy and provides expert guidance on all crypto-related matters, including audits and regulatory compliance. For the CertHub initiative, we are seeking an IT Security Developer to contribute to strategic programs within Cryptography Engineering and Solutions.
- Associate Information Security Specialist to automate onboarding and renewal workflows for GCP services such as Load Balancers, GKE clusters, Google Secret Manager, Cloud Functions, and Apigee. The role involves contributing to secure Java-based development within IS Technology, assisting in streamlining certificate management processes, and helping reduce IT complexity.
What we’ll offer you
As part of our flexible scheme, here are just some of the benefits that you’ll enjoy
- Best in class leave policy
- Gender neutral parental leaves
- 100% reimbursement under childcare assistance benefit (gender neutral)
- Sponsorship for Industry relevant certifications and education
- Employee Assistance Program for you and your family members
- Comprehensive Hospitalization Insurance for you and your dependents
- Accident and Term life Insurance
- Complementary Health screening for 35 yrs. and above
Your key responsibilities
- Automate onboarding and renewal workflows for GCP services such as Load Balancers, GKE clusters, Google Secret Manager, Cloud Functions, and Apigee.
- Implement automated certificate provisioning and renewal pipelines using CertHub CAS plugins, GCS repositories, and truststore automation modules.
- Manage integration of new CA generations into GCP components
- Maintain multi‑cluster onboarding strategies, Service Directory namespaces, and domain configurations for GKE
- Implement centralized automated truststore management for GCP services, including Apigee truststore automation and periodic sync processes.
- Troubleshoot certificate enrollment failures in UAT/PROD and perform post‑renewal activities for GKE, LB, and GSM certificates.
- Contribute to certificate‑related microservice APIs, Cloud Functions / Cloud Run automation, and backend workflows of the project.
- Perform codebase stabilization, refactoring, and performance optimization for CertHub GCP modules.
- Guide application teams onboarding certificates to CertHub for GCP services (e.g., BigQuery, GKE, GCE VM certs, LB certs).
- Help troubleshoot GCP certificate errors (e.g., CRL checks, renewal errors, domain validation mismatches, application mapping issues).
- Assist teams in migration decisions between On‑Prem PKI ↔ GCP CertHub workflows.
Your skills and experience
Required Skills
Core Technical Skills
- Strong expertise in Google Cloud Platform (GKE, GCE, Cloud Run, Cloud Functions, GSM, GCS, Cloud DNS, Load Balancers).
- Solid understanding of PKI, X.509 certificates, Certificate Authority Services, truststore/keystore formats, CRL/OCSP.
- Experience automating certificate issuance, renewal, validation, and domain verification.
- Proficiency in scripting (Python, Bash) and automation pipelines (Terraform modules, CI/CD, GitHub workflows).
- Understanding of Identity & Access Management, service accounts, AD groups, and GCP landing zone patterns.
Soft Skills
- Ability to collaborate with cryptography architects, and engineering teams.
- Strong troubleshooting mindset and experience supporting production environments.
- Excellent communication for guiding onboarding teams and documenting complex technical flows.
Nice-to-Have Skills
- Hands-on with Apigee API development / truststore automation.
- Knowledge of KeyFactor ecosystem upgrades and integration touchpoints.
How we’ll support you
- Training and development to help you excel in your career
- Coaching and support from experts in your team
- A culture of continuous learning to aid progression
- A range of flexible benefits that you can tailor to suit your needs
About us and our teams
Please visit our company website for further information:
https://www.db.com/company/company.html
We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.
Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.
We welcome applications from all people and promote a positive, fair and inclusive work environment.





