Cryptography Lead Engineer

Salary: £30,000 - 50,000 per year

Requirements:

• Experienced Cryptography Lead Engineer
• Strong expertise in Public Key Infrastructure (PKI), Certificate Lifecycle Management (CLM), Hardware Security Modules (HSMs), and certificate automation platforms such as AppViewX and Keyfactor Command

Responsibilities:

• Lead the architecture, deployment, and operations of enterprise PKI environments.
• Design and manage Certificate Authority (CA) hierarchies, certificate policies, and trust models.
• Develop cryptographic standards, guidelines, and best practices across the organization.
• Ensure compliance with industry standards and regulatory requirements related to cryptography and certificate management.
• Implement and manage enterprise Certificate Lifecycle Management solutions.
• Automate certificate issuance, renewal, revocation, and discovery processes.
• Develop processes to prevent certificate-related outages and reduce operational risks.
• Define certificate governance and lifecycle policies across enterprise environments.
• Manage and enhance AppViewX platform implementations.
• Design workflows for certificate automation and lifecycle management.
• Configure integrations with PKI platforms, ITSM tools, load balancers, web servers, and cloud platforms.
• Support certificate discovery, monitoring, reporting, and compliance dashboards.
• Configure and administer the Keyfactor Command platform.
• Develop and maintain integrations between Keyfactor and enterprise PKI environments.
• Automate certificate enrollment and lifecycle management using Keyfactor workflows.
• Support inventory management, certificate monitoring, and remediation activities.
• Design and manage HSM infrastructure, including Thales, Entrust, Luna, nCipher, or equivalent systems.
• Perform key generation, storage, protection, backup, and recovery activities.
• Ensure secure cryptographic key lifecycle management.
• Support HSM integrations with PKI and certificate management platforms.
• Develop automation solutions using PowerShell, Python, REST APIs, and scripting frameworks.
• Implement Infrastructure-as-Code and CI/CD integrations for certificate automation.
• Integrate certificate management with cloud-native services and enterprise applications.
• Enable self-service certificate provisioning where appropriate.
• Support audits and compliance initiatives.
• Maintain cryptographic controls aligned with NIST, PCI-DSS, ISO 27001, SOC2, and other industry standards.
• Conduct risk assessments related to certificate and key management.
• Maintain cryptographic inventory and reporting capabilities.

Technologies:

• AI
• CI/CD
• Cloud
• Cryptography
• Hardware
• HSM
• Support
• ITSM
• PowerShell
• Python
• REST
• Security
• Web
• DevSecOps
• DevOps
• Spark

More:

We are HCLTech, a global technology company with more than $13 billion in revenue and over 224,000 people across 60 countries. We deliver capabilities in digital, engineering, cloud, and AI through a broad portfolio of technology services and products, while retaining an idea-first, startup mindset. We are hiring a Cryptography Lead Engineer in Leeds, UK, in a hybrid arrangement requiring two days per week at the client location. The role leads enterprise cryptography strategy, certificate governance, automation, security compliance, and operations across multi-cloud and on-premises environments. We offer a supportive, diverse global team, competitive compensation and benefits, opportunities to develop skills and contribute to exciting projects, and wellbeing and community initiatives.

last updated 39 week of 2026