Lead PKI & Cryptography Engineer

Role & responsibilities

1. Technical Operations

• Operate and maintain multi-tier PKIs (Corporate, specialized and Microsoft)
• Manage certificate lifecycle processes (issuance, renewal, CRL/OCSP, templates, enrolment methods)
• Properly manage keys according to regulations and industry standards
• Support Certificate use cases in applications managed by other teams and business units.
• Coordinate with the InfoSec team to manage vulnerability remediation and ensure compliance with security standards.

2. Service Excellence & Governance

• Ensure PKI services meet strict availability, reliability and security defined by SLA
• Folow ITIL processes for incident, problem and change management
• Participate in risk assessments, compliance checks, audits, pen-tests and overall governance activities.
• Produce and maintain operational procedures, documentation and audit evidences
• Track and improve PKI related KPIs

3. Customer Focus

• Act as a point of contact for application issues.
• Provide support to application teams integrating certificate-based authentications.
• Provide guidance for cryptographic concepts for non-expert customers.
• Ensure secure certificate usage and best practices across the organization

4. People & Team

• Collaborate closely with IAM, Cybersecurity, Infrastructure and DevOps teams when needed.
• Participate in teams working mode events like daily meetings, sprint plannings and spring review.
• Contribute to documentation, knowledge sharing and operational excellence.

Qualifications & Experience:

• Bachelors / Masters degree in Computer Science, Information Technology, or related field.
• 6+  years of experience in PKI, cryptography or certificate lifecycle management
• Hands-on experience with Microsoft ADCS or non-Microsoft PKI
• Strong knowledge of Crypto Key Management
• Knowledge using tools like Powershell or Python, YAML, Git and CI/CD
• Good understanding of Windows Server, Linux, networking and TLS protocol.