Principal Cryptography and PKI Engineer

Principal Cryptography andamp; PKI EngineerBuild the cryptographic trust infrastructure behind a large-scale enterprise.We''re looking for a Principal Cryptography andamp; PKI Engineer to take technical ownership of cryptography, PKI and enterprise key management across our organisation.We''re looking for someone who understands why the architecture works, where it can fail, how to operate it at scale, and how to automate it.You''ll become a senior technical authority for cryptography and PKI, working directly with security leadership and engineering teams to build the infrastructure that establishes trust across applications, systems, workloads, devices and people.What you''ll be doingYou''ll own the technical direction of our PKI and cryptographic capabilities, including:Designing CA hierarchies, trust models and certificate policies.Building highly available PKI capable of operating at enterprise scale.Automating certificate issuance, renewal, revocation and rotation.Designing and operating HSM and enterprise key-management architectures.Integrating PKI with cloud infrastructure, Kubernetes, CI/CD, applications and identity platforms.Defining enterprise standards for cryptographic algorithms, protocols and key management.Helping engineering teams implement TLS, mTLS, code signing and workload identity securely.Designing processes for key compromise, emergency rotation and recovery.Building the monitoring and operational controls required to run PKI as critical ..... full job details .....