Cryptographic Services Architect

Salary: £66,000 - 106,000 per year

Requirements:

• We are looking for an experienced Cryptographic Services Architect.
• We require proven experience designing and delivering enterprise PKI and cryptographic solutions.
• We require a strong understanding of certificate authorities, certificate lifecycle management, root of trust architectures, digital certificates, and digital signatures.
• We require hands-on experience with enterprise PKI platforms such as Keyfactor, EJBCA, Active Directory Certificate Services, Azure Certificate Services, or Evertrust.
• We require experience leading technical solutions across bids, proposals, and complex programmes.
• We require strong technical documentation and stakeholder communication skills.
• We require the ability to translate complex technical concepts into clear business-focused recommendations.
• We require experience working across the full project lifecycle from bid through delivery and into service.
• We require degree-level qualification in Engineering, Cyber Security, Computer Science, or a related discipline, or equivalent practical experience.
• We require experience in PKI administration, cryptographic systems design, or cryptographic services delivery.
• Relevant security certifications such as CISSP or CISM are highly desirable.
• Desirable experience includes post-quantum cryptography planning and migration.
• Desirable experience includes cryptographic standards and frameworks such as NCSC, NIST, ETSI, ISO, and IEC.
• Desirable experience includes scripting and automation using PowerShell, Python, or Bash.
• Desirable experience includes identity and access management integration.
• Desirable experience includes critical national infrastructure or operational technology environments.
• Desirable experience includes application and cloud security technologies.

Responsibilities:

• We lead the cryptographic architecture for bids, proposals, and project delivery.
• We define secure, scalable, and compliant solutions aligned with customer requirements and industry best practice.
• We produce high-quality architectural documentation including high-level designs, solution designs, requirements specifications, and testing artefacts.
• We present technical solutions confidently to customers, senior stakeholders, and technical review boards.
• We support the transition from bid to delivery, ensuring architectural integrity throughout the project lifecycle.
• We design and integrate enterprise cryptographic services including public key infrastructure, certificate lifecycle management, key management systems, hardware security modules, and post-quantum cryptography migration strategies.
• We advise customers on cryptographic agility, future security requirements, and quantum-readiness.
• We lead integration, deployment, testing, and acceptance activities across customer environments.
• We drive continuous improvement across architecture practices, standards, and tooling.
• We work closely with bid teams, project managers, engineers, security specialists, and customer stakeholders.
• We identify technical risks and develop effective mitigation strategies.
• We support knowledge transfer into operational support teams.
• We mentor engineers and promote knowledge sharing across the cryptographic services community.

Technologies:

• Active Directory
• Architect
• Azure
• Bash
• Cloud
• Cryptography
• Hardware
• Support
• PowerShell
• Python
• Security
• IAM

More:

We are Thales, a global technology leader with more than 83,000 employees across five continents and over 7,500 people in the UK, operating in defence, space, aerospace, and digital security. We help build a future we can all trust by supporting the security and stability of our nation through extraordinary technology and social value. This role is based in Reading or Doncaster, with other Thales sites considered. It is a full-time opportunity within our Secure Communications & Information Systems business and our established Cryptographic Services Practice. We offer a benefits package that may include private medical insurance, buying or selling annual leave, cycle to work schemes, employee discounts, a paid volunteering day, stocks and shares, and an annual bonus, depending on the role. We are committed to equal opportunities, pay and working conditions, and to creating a workplace where everyone feels valued. We also offer talent community and inclusion programmes, employee networks, wellbeing policies, and inclusive features.

last updated 36 week of 2026