Senior Security Engineer with 10+ years in PKI, applied cryptography and digital identity for critical and financial infrastructure. Specialist across the cryptographic identity lifecycle: X.509, HSM/KMS, certificate automation, mTLS and machine/workload identity. Hands-on delivery of human authentication: MFA, passwordless/FIDO2 and OIDC/OAuth2/SAML federation. Experienced operating under regulated frameworks such as PCI DSS, GDPR and FINMA.
Professional Experience
Sr. PKI & MFA Systems Engineer — Bolsas y Mercados Españoles (SIX Group)09/2023 – Present
Interim team lead for the Cryptographic Services team: operations, priorities and stakeholder coordination until a permanent manager was appointed.
Lead PKI, PQC and certificate lifecycle management initiatives across business-critical systems, including design and implementation of domain and service based CA architectures.
Machine/workload identity: certificate issuance, renewal and mTLS for services and containerized platforms (Kubernetes/OpenShift), with automation of the certificate lifecycle.
Human authentication and federation: MFA, passwordless/FIDO2 and OIDC/OAuth2/SAML integration of applications with Entra ID and ADFS.
Subject-matter expert for PKI, MFA and cryptographic controls, ensuring compliance with PCI DSS and internal security standards.
Led the cryptography team for Argentina's largest oil & gas company; administered the corporate PKI (AD CS) and HSM estate.
Deployed and integrated Thales CipherTrust Manager (CTM) with Entra ID, CCKM and the HSM; evaluated key-management use cases (Key Vault) and PoC-tested the encryption connectors.
Managed Privileged Access Management (One Identity SafeGuard) and cloud key/certificate material across AWS and Azure.
Delivered network and service authentication, passwordless and MFA, data encryption and Zero Trust initiatives across IT and business units.
Subject-matter expert for PKI, X.509 certificates and cryptography.
PKI Systems Leader — Digital Signatures Infrastructure · Secretariat of Public Innovation05/2020 – 10/2021
National Digital Signature Authority · Argentina
Managed PKI systems and delivered new services for Argentina's National Digital Signature Root and issuing Certification Authorities.
Defined project goals and technical requirements, planned technical-team activities and oversaw outsourced services to ensure compliance.
PKI Systems Analyst & Administrator — Digital Signatures · Ministry of Modernization04/2014 – 03/2019
National Digital Signature Authority · Argentina
Full administration of Argentina's official digital-signature infrastructure: certificate lifecycle, Certification Authorities, HSM, AD CS and PKI.
Implemented security policies covering asset and access control, physical/logical security, redundancy, contingency and continuity of operations.
Education
Mechanical Engineer (5-year degree) — Universidad Tecnológica Nacional (FRBA)2013 – 2018
Certifications & Training
CISSP training · AZ-500 Microsoft Azure Security Training · AWS Security Fundamentals · Windows Server AD Certificate Services (Microsoft).