Cryptography Lead in Penarth

Job Description

We are seeking an experienced Cryptography Lead SME to lead the deployment, integration, and operational management of the AgileSec Analytics Platform within a large enterprise environment.

This role requires deep expertise in PKI, certificate lifecycle management, TLS/SSL, platform engineering, automation, and security operations.

The successful candidate will provide technical leadership, drive platform reliability, and enable Security-as-Code initiatives across enterprise infrastructure.

Key Responsibilities

• Platform Engineering & Leadership: Lead the onboarding, deployment, integration, and operationalization of the AgileSec Analytics platform.
• Own platform architecture, configuration management, upgrades, patching, and operational readiness.
• Ensure platform scalability, performance, and high availability.
• PKI & Certificate Management: Manage the complete certificate lifecycle including issuance, renewal, revocation, rotation, and trust store management.
• Implement enterprise certificate discovery using AgileSec and Cipher Insights to identify unknown certificates and machine identities.
• Troubleshoot TLS/SSL handshake issues, certificate chain validation, trust failures, OCSP/CRL validation, and certificate expiration incidents.
• Integrate and administer Keyfactor or equivalent PKI management platforms.
• Automation & Integration: Design and implement secure REST API and webhook integrations.
• Develop automated certificate management workflows integrated with CI/CD pipelines.
• Build Infrastructure-as-Code and Security-as-Code solutions using Terraform, Ansible, and scripting languages.
• Platform Monitoring & Analytics: Develop dashboards, monitoring, and reporting using OpenSearch, ELK, and Splunk.
• Configure platform monitoring, alerting, and operational health dashboards.
• Support analytics and reporting for certificate and platform operations.
• Infrastructure & Cloud: Administer Linux-based environments and Kubernetes platform services.
• Integrate AgileSec and Keyfactor with AWS, Azure, F5, NGINX, IIS, Kubernetes, and enterprise infrastructure components.
• Perform platform upgrades, tuning, troubleshooting, and incident resolution.
• Leadership & Collaboration: Act as the technical lead for Security, Infrastructure, Engineering, and Operations teams.
• Lead troubleshooting of certificate-related outages and platform incidents.
• Develop technical documentation, operational procedures, administrator guides, and support runbooks.
• Mentor junior engineers and promote knowledge sharing and best practices.

Required Skills & Experience

• Strong expertise in PKI, certificate lifecycle management, and enterprise cryptography.
• Hands-on experience with Keyfactor or equivalent PKI management platforms.
• Deep knowledge of TLS/SSL, certificate validation, trust chains, OCSP, and CRL.
• Experience with OpenSearch, ELK Stack, and Splunk.
• Strong Linux administration and Kubernetes platform management experience.
• Experience integrating enterprise platforms using REST APIs and webhooks.
• Hands-on experience with CI/CD and automation tools including: Azure DevOps, GitHub Actions, Jenkins, Terraform, Ansible, Helm. Proficiency in Python, PowerShell, and Bash scripting.
• Experience integrating enterprise security platforms with AWS, Azure, F5, NGINX, IIS, and Kubernetes.

Preferred Attributes

• Strong technical leadership and mentoring skills.
• Excellent communication and stakeholder management abilities.
• Strong analytical and problem-solving skills.
• Passion for automation, DevSecOps, and Security-as-Code.
• Ability to lead enterprise-scale security platform implementations and operational support.