Lead Engineer - PKI (Cyber Defence & Resilience)

Position Overview

The PKI Team Lead is responsible for leading the design, operation, governance, and continuous improvement of the organization's Public Key Infrastructure (PKI) services. The incumbent will lead a team of PKI engineers, ensure compliance with security policies and industry standards, and drive modernization efforts including Certificate Lifecycle Management (CLM) and Post-Quantum Cryptography (PQC) readiness. 

Role & Responsibilities

PKI Operations & Service Management

• Lead enterprise PKI operations and maintain the availability, integrity, and security of CA, OCSP, and CRL services.
• Oversee certificate operations, incident resolution, service requests, and operational documentation.

Certificate Lifecycle Management

• Govern certificate inventory, ownership, issuance, renewal, revocation, and recovery.
• Drive certificate automation, evaluate CLM solutions, and prepare for evolving TLS requirements.

PKI Infrastructure & Security

• Provide technical leadership across PKI architecture, HSMs, private keys, trust hierarchies, and cryptographic services.
• Lead upgrades, migrations, security reviews, and integration with enterprise and cloud platforms.

Governance, Risk & Compliance

• Ensure alignment with organisational policies, regulatory requirements, and industry standards.
• Maintain PKI controls and documentation while supporting audits, investigations, and risk assessments.

Project & Technology Leadership

• Drive PKI modernisation, certificate discovery, cryptographic agility, and automation initiatives.
• Assess emerging technologies such as post-quantum cryptography and develop the PKI roadmap.

Team Leadership & Stakeholder Management

• Lead and develop PKI engineers while overseeing workload, performance, and capability development.
• Review technical deliverables and provide guidance on complex PKI and cryptography matters.

Requirements

• Degree in Computer Science, Information Security, Cyber Security, Engineering, or related discipline.
• Minimum 8 years of IT experience with at least 5 years in PKI, certificate management, or cybersecurity operations.
• Minimum 2 years in a leadership or supervisory role
• Services (ADCS). X.509 certificates, TLS/SSL, PKCS, CRL, OCSP, and cryptographic protocols.
• Hardware Security Modules (HSMs). Certificate Lifecycle Management platforms (e.g., Keyfactor, Venafi, DigiCert Trust Lifecycle Manager).
• Enterprise PKI architecture and operations. Public, private, and hybrid cloud security architectures.
• Security governance, risk, and compliance frameworks
• CISSP, GCED, GISP, CISM, CSSP, Microsoft Security Certifications preferred

Apply Now

NOTE: It only takes a few minutes to apply for a meaningful career in HealthTech - GO FOR IT!!