Information Security Engineer (PKI/Systems)

Endava is a technology company that has been harnessing technology to drive meaningful change for over two decades. They are seeking a Senior Identity & Encryption Engineer with expertise in Public Key Infrastructure (PKI) to lead the design and implementation of enterprise cryptographic services, providing technical leadership and establishing scalable solutions for clients.

Responsibilities:

• Lead the design, modernization, and optimization of enterprise PKI and certificate management platforms
• Provide technical leadership for certificate lifecycle management, secrets management, and cryptographic services across hybrid and cloud environments
• Design and implement automated, scalable certificate provisioning and renewal processes using modern engineering practices
• Develop self-service capabilities that enable development and infrastructure teams to securely request and provision certificates with minimal manual intervention
• Design and implement API-driven integrations that enable CI/CD pipelines and DevOps platforms to securely interact with enterprise secrets management solutions
• Maximize the value of existing security platforms by standardizing enterprise workflows, eliminating siloed solutions, and driving adoption of centralized services
• Define engineering standards, best practices, and architectural patterns for PKI, certificate management, and secrets management
• Serve as the senior technical escalation point for complex cryptographic platform issues and mentor engineering teams on automation and operational excellence
• Contribute to platform hardening through secure configuration, delegation models, monitoring, patch management, and continuous optimization
• Develop engineering roadmaps and implementation strategies aligned with client business objectives and evolving security requirements
• Partner with cross-functional engineering, infrastructure, DevOps, security, and application teams to deliver scalable enterprise identity and encryption solutions
• Evaluate emerging technologies and industry trends to ensure long-term platform sustainability and future readiness

Requirements:

• 7–10+ years of experience designing, implementing, and managing enterprise PKI, certificate lifecycle management, or cryptographic platforms
• Deep expertise in PKI architecture, certificate management strategies, cryptographic services, and enterprise security best practices
• 5+ years of engineering experience building automation solutions within Identity, Directory Services, or DevOps environments
• Strong PowerShell scripting and automation experience
• Experience designing and supporting Infrastructure as Code (IaC) and CI/CD pipelines
• Experience integrating enterprise platforms through REST APIs and automation frameworks
• Hands-on experience deploying, managing, and troubleshooting Hardware Security Modules (HSMs)
• Experience with cloud platforms including Azure, AWS, or Google Cloud, with strong knowledge of Azure Key Vault or equivalent cloud secrets management services
• Demonstrated experience collaborating with cross-functional technical teams to deliver enterprise infrastructure and security solutions
• Strong understanding of incident, problem, request, and change management processes
• Excellent communication skills with the ability to engage technical teams, architects, project managers, and business stakeholders
• Experience administering and engineering Keyfactor Certificate Management Platform
• Experience with HashiCorp Vault and CyberArk
• Experience integrating enterprise secrets management platforms into DevOps and CI/CD workflows
• Knowledge of modern zero-touch certificate lifecycle management and certificate-as-a-service architectures
• Experience developing self-service platforms for identity, certificate, or secrets management
• Consulting experience delivering enterprise security transformation initiatives across multiple clients or industries