System Security Engineer

Work closely with IT Security Architects (Cryptography and PKI), implementation partners (CLM, EKMS), CA/PKI operators, and application owners to implement and operationalize certificate and key management solutions using best‑of‑breed technology and methodology.

Conduct requirement workshops with application teams and platform owners, analyze certificate and key management requirements holistically across on premises and Cloud (AWS) estates.

Contribute to, influence, and review the design of CLM and EKMS solutions to ensure they meet both security and operational needs; demonstrate technical depth in PKI, certificate lifecycle, and key management.

Setup, improve, and streamline certificate and key management operational processes (issuance, renewal, revocation, discovery, rotation, escrow) for continuous improvement and to eliminate outage risk from expiry.

Incorporate cryptographic and key management best practices (FIPS, NIST, X.509, PKCS) into ope...