JOB POSTING The Federal Chancellery is seeking, for its Berlin office, to fill the following permanent position in Unit 132 “Information and Communication Technology” as soon as possible: two IT specialists (m/f/d) for specialized applications and systems with a focus on PKI infrastructures and certificate management. The Federal Chancellery provides comprehensive support to the Federal Chancellor in carrying out his duties. It briefs the Federal Chancellor on current political affairs and the activities of the federal ministries. In addition, the Federal Chancellery coordinates work within the Federal Government, prepares decisions by the Federal Chancellor, and oversees their implementation. Division 132 is responsible for the secure operation and continuous development of information and communication technology at the Federal Chancellery. To this end, we operate our own systems and work closely with external service providers from the federal administration and the private sector. We rely on state-of-the-art technologies for the digitization and modernization of our IT. The expansion of the Federal Chancellery is creating a forward-looking administrative and work location. We are responsible for the planning, implementation, and secure operation of the entire IT and communications infrastructure in the new building—from highly secure networks and modern solutions to innovative digital workstations. Responsibilities / What to Expect: Responsibility for the central Public Key Infrastructure (PKI) as the key technical hub for cryptographic security and digital identities within the government network Secure, highly available operation and further development of the complex PKI identity infrastructure using enterprise technologies, including participation in architecture and security concepts in close collaboration with network, security, and service teams Analysis and evaluation of new functional and technical requirements in the PKI environment, including the introduction of qualified, legally compliant digital signatures, the integration of external IT service centers, and the highly secure integration of cloud and hybrid infrastructures Technical and functional management of external vendors and service providers—from the creation and review of service specifications as part of tendering processes to active support and quality assurance in implementation projects Continuous development and standardization of lifecycle processes to ensure a modern, future-proof PKI infrastructure Requirements / What you bring to the table: A successfully completed degree (Bachelor’s or equivalent) in (Business) Computer Science, Telecommunications Engineering, or another relevant field of study; or comparable experience and skills in the form of verifiable, multi-year professional experience in a relevant field, with proof of relevant continuing education and comprehensive knowledge of the technologies used in the role Several years of experience in the design and operation of PKI and identity solutions in enterprise environments, as well as an in-depth understanding of cryptographic protocols, certificate standards (X.509), and authentication protocols (802.1X, TLS, Kerberos, SAML/OIDC), and certificate management protocols (ACME, CMP, SCEP) Extensive experience with EJBCA, HSM, AD Certificate Services, or comparable PKI platforms with integrated certificate and key management, and in-depth knowledge of digital signatures and smartcard-based authentication (smartcards, eIDAS, S/MIME) Extensive practical experience in the administration and configuration of central email services (especially MS Exchange) as well as the integration of line-of-business applications into the email infrastructure Experience and knowledge of MS Windows Server, Active Directory, and DNS, as well as in the creation of group and security policies, standards, and audit-proof logging, monitoring, and documentation Proficiency in scripting languages (PowerShell, Python) for automating certificate and directory tasks Strong conceptual skills and the ability to translate complex security requirements into scalable and maintainable architectures Knowledge of the application of the Classification of Classified Information Directive (VSA) and BSI Basic Protection is an advantage Structured, independent work style Experience collaborating with interdisciplinary teams (network, security, operations) and strong teamwork and communication skills, as well as a high sense of responsibility and service orientation German language skills are essential (business fluent – Level C1) as well as good English language skills (Level B1) – (Competence level specified according to the Common European Framework of Reference for Languages) Absolute discretion and willingness to participate in an extended security clearance process with security investigations pursuant to Section 10 of the Security Clearance Act What else you should know: Even if you are currently still a student or enrolled in vocational training, continuing education, or professional development and are about to graduate, we welcome your application! For foreign educational qualifications, we require proof of equivalence to a German degree (see the Central Office for Foreign Education (ZAB) at https://www.kmk.org/zab or the ANABIN database). We are convinced that diverse teams can achieve better results. We therefore look forward to applications from people of all backgrounds, religions, worldviews, sexual identities, or orientations, regardless of any disabilities. We expressly encourage people with an immigrant background to apply. We see ourselves as a family-friendly employer and therefore also welcome applications from people with family responsibilities. The position to be filled is generally suitable for job sharing and also for part-time employment, provided that the tasks can be performed as required. Therefore, we will assess whether part-time requests can be accommodated within the scope of operational possibilities. The Federal Chancellery ensures professional equality between women and men. People with severe disabilities will be given preferential consideration if equally qualified; only a minimum level of physical fitness is required of them. The duties to be performed allow for classification up to pay grade 12 of the TVöD (Collective Agreement for Civil Servants) provided the personal requirements are met. Your pay grade will be determined based on your professional experience and career history. We can currently offer you an annual salary (gross) of up to 90,100 euros (up to 92,500 euros including the ministerial allowance starting in May 2026). Depending on the applicant pool, salaried employees may be eligible for an additional temporary skilled worker allowance of up to 1,500 euros per month. In addition, salaried employees receive a company pension plan through the Federal and State Pension Fund. If the personal requirements are met, a subsequent appointment as a civil servant may be granted. If you are already employed in the public sector or are a civil servant (up to pay grade A 13 g, excluding the office allowance), we will seek a secondment or assignment with the aim of a transfer or permanent appointment. We offer a good work-life balance with flexible working hours and the option to work from home within the scope of official duties, as well as 30 days of annual leave per calendar year. Additionally, if you have sufficient time credits, we can grant you up to 18 days of compensatory time off within a year. In addition to its convenient location, the Federal Chancellery also boasts excellent public transportation connections. We also offer a monthly employer subsidy for the VBB Company Ticket/Deutschland-Ticket Job. Look forward to targeted onboarding, personalized professional development, and a multifaceted work environment with diverse and exciting topics, as well as opportunities to implement your own ideas and pursue personal growth within a dedicated and motivated team. Have we piqued your interest, and would you like to join our team? Then we look forward to receiving your application. You are welcome to submit your application materials by June 24, 2026, via www.interamt.de. You can find the job posting there under Job ID: 1445384. If you do not have Interamt access, you must first register at www.interamt.de. Unfortunately, applications submitted outside of Interamt cannot be considered. For organizational questions, please feel free to contact us at 49 30 18 400-28 50. Information on the selection process: Please note that we may conduct interviews via video conference using Cisco Webex. Data Protection: Information regarding data protection and the associated handling of your personal data as part of the application process is available online at the following link: www.bundesregierung.de/datenschutz-im-auswahlverfahren-bkamt