Senior PKI Engineer

We are looking for an experienced Senior PKI Engineer to design, implement, administer, and support an enterprise Public Key Infrastructure (PKI) environment within a regulated banking environment.

The role will focus on certificate lifecycle management, Certificate Authority administration, cryptographic key management, PKI automation, security compliance, and integration with enterprise applications and infrastructure platforms .

This position will also support the organisation’s PKI Certificate Lifecycle Management (CLM) programme and ensure secure, reliable, and compliant management of digital certificates across the enterprise.

Key Responsibilities

• Manage and maintain enterprise PKI infrastructure, including Certificate Authorities (CA), Registration Authorities (RA), and certificate management platforms .
• Administer end-to-end certificate lifecycle management , including issuance, renewal, revocation, replacement, and expiry tracking.
• Deploy and support SSL/TLS certificates across servers, middleware, databases, web applications, APIs, and network devices.
• Implement certificate discovery, inventory management, monitoring, and compliance reporting.
• Manage cryptographic keys and Hardware Security Modules (HSMs) in line with security standards and governance requirements.
• Develop and maintain automation scripts, APIs, and workflows for certificate provisioning and renewal.
• Integrate PKI solutions with enterprise applications, middleware, databases, monitoring tools, ITSM platforms, vulnerability management tools, and secrets-management solutions.
• Troubleshoot certificate, authentication, encryption, trust-chain, and TLS-related issues.
• Maintain PKI operational procedures, standards, audit documentation, and governance controls.
• Collaborate with application, infrastructure, cybersecurity, and vendor teams on PKI initiatives and certificate deployments.
• Support modernisation initiatives including TLS 1.3 adoption, certificate governance, and Post-Quantum Cryptography (PQC) readiness .

Requirements

• Minimum 10 years of experience in PKI, Cybersecurity, Infrastructure Security, or a closely related field.
• Banking / Financial Services experience is mandatory.
• Strong hands-on experience in Public Key Infrastructure (PKI) and Certificate Lifecycle Management.
• Strong knowledge of X.509 Certificates, CA, RA, CRL, OCSP, SSL/TLS .
• Experience with PKI / CLM platforms such as Microsoft ADCS, DigiCert, Entrust, Keyfactor, Venafi, AppViewX , or similar solutions.
• Hands-on experience with HSMs and cryptographic key management .
• Good understanding of cryptographic technologies including RSA, ECC, AES-256, SHA-2/SHA-3, TLS 1.2/1.3 .
• Strong experience with Windows and Linux environments.
• Scripting experience using PowerShell, Python, or Shell scripting .
• Experience integrating PKI with applications, APIs, middleware, databases, and enterprise security platforms .
• Familiarity with RBAC, audit controls, security compliance, and governance requirements .
• Strong troubleshooting, analytical, and stakeholder-management skills.

Registration No.: R25156061 EA No.: 11C3373