Who is Infinite Ranges?

Lil’ ol’ us? Oh, pshaw. Thanks for asking!

We’re a team of hyper-specialized DevSecOps experts based in Austin (and around the country), who have already partnered with some of the biggest products in tech, who also thwart hackers the world over.
Now imagine that group of people, but also a version that’s all dressed up in superhero costumes and totally awesome.

Incident Response. Red-teaming. AppSec. Modern IT.

We do all of it.

Or, to describe us in a way you could tell your parents: “We suggest tech solutions. We make tech solutions. Then, when we’re making solutions we suggest more solutions. It’s a whole thing, Dad. Upward spirals of making businesses more and more secure."

Anyway, above all that, we’ve built our company thinking culture-first. We want fighters who are positive, savvy, and smart. Because at the end of the day, Infinite Ranges is a group of misfits who pride ourselves on working hard and playing hard, but most of all rewarding each other for our successes.

You can — and should — learn more about us at InfiniteRanges.com!

Note: The exclamation point is not part of the URL.

Purpose of job:

• To conduct a design assessment for a public key infrastructure (PKI) for internal machine, user, x.509, SSH, and other HTTPS/TLS certificates and keystores. The assessment will include considerations for automation, fault-tolerance, architecture and security best practices, issuance, revocation, and downstream security use cases.

Success Measurement(s) in this role:

• Determine functional, architectural, and design requirements for PKI architecture IAW (in accordance with) applicable regulatory requirements and standards.
• Develop enterprise PKI designs, conceptual through detailed design, IAW customer requirements, regulatory and operational constraints.

Job Tasks ID’d for the role:

• Develop conceptual level designs for PKI and certificate architecture.
• Develop detailed designs for PKI and certificate architectures.
• Maintain and advocate application security architecture based on standards, best practices and in accordance with various regulatory requirements.
• Lead consultative client engagements to define application security strategy, architecture and roadmaps.
• Review application and system architectures, processes, and impact analysis from a security perspective.
• Development of resource staffing recommendations, organization structure and plans for project execution, governance and security of the PKI Infrastructure solution designs.
• Increase capability maturity of the security program as applies to PKI.
• Clearly and concisely develop tactical and strategic action plans to be reviewed, discussed and executed by the delivery and client team.
• Develop and interpret security policies, standards, and procedures to design requirements.
• Provide client education and guidance to client teams based on designed PKI architectures.
• Lead projects to drive the assessment, operationalization and adoption of new technologies, platforms and tools.
• Facilitate and help mature IT service management and cybersecurity processes including change management, incident management, configuration management, threat and vulnerability management.

Technology in use:

• Venafi
• KeyFactor
• Microsoft PKI infrastructure
• Thales HSMs (Luna, et al)
  OCSP

Skills that pay the bills:

• Curiosity to learn combined with a builder-attitude will be critical in our mission to address evolving threats and protect company information and resources.
• Knowledge of encryption fundamentals: PKI, keystores, certificate management, certificate orchestration, platforms, and key management best practices.
• 5+ Years of experience with enterprise PKI architectures.
• 5+ years of experience with Cloud technologies (AWS or Azure, KMS, Keyvault).
• Experience developing CP and CPS documents.
• Strong analytical and problem-solving skills and demonstrated experience coordinating strategic efforts in an effective and efficient manner.

Specialized skills requested:

• Strategic thinker, with experience planning and executing multiyear infrastructure and cloud security roadmaps.
• Ability to define program KPIs and metrics.
• Knowledge of IT and Cybersecurity frameworks, such as NIST, FIPS, CSF, CIS, ISO 27001/2.
• Working knowledge of Cloud provider security architecture design patterns, and key control methods - Bring your own key, Hold your own key, partitioned HSMs.
• Knowledge of API security architecture and technologies.
• Knowledge of OWASP Web/API vulnerabilities and compensating controls (CSRF, XSS, SQLI, etc.).

Certification(s):

• Microsoft Certificate Authority
• A certificate management platform
• Hardware Security Module (HSM)
• AWS Architect
• Azure Architect