Principal Cryptography & PKI Engineer

Principal Cryptography & PKI Engineer
Build the cryptographic trust infrastructure behind a large-scale enterprise.

We're looking for a Principal Cryptography & PKI Engineer to take technical ownership of cryptography, PKI and enterprise key management across our organisation.
We're looking for someone who understands why the architecture works, where it can fail, how to operate it at scale, and how to automate it.

You'll become a senior technical authority for cryptography and PKI, working directly with security leadership and engineering teams to build the infrastructure that establishes trust across applications, systems, workloads, devices and people.

What you'll be doing
You'll own the technical direction of our PKI and cryptographic capabilities, including:

• Designing CA hierarchies, trust models and certificate policies.
• Building highly available PKI capable of operating at enterprise scale.
• Automating certificate issuance, renewal, revocation and rotation.
• Designing and operating HSM and enterprise key-management architectures.
• Integrating PKI with cloud infrastructure, Kubernetes, CI/CD, applications and identity platforms.
• Defining enterprise standards for cryptographic algorithms, protocols and key management.
• Helping engineering teams implement TLS, mTLS, code...