AVP - Cryptography PKI Engineer

Barclays UK; Knutsford; On-site; GBP 70,000 - 95,000; Full time

Job summary

Join a leading financial institution as an AVP Cryptography PKI Engineer, ensuring robust cryptographic infrastructure and security across banking applications. This role offers opportunities for leadership and technical expertise in PKI solutions, while contributing to enhancing data integrity and security in a global operations team.

Qualifications

• Experience in PKI (Public Key Infrastructure) and digital certificate management.
• Knowledge of standards such as NIST, FIPS, ISO27001/27002.
• Proficiency in Linux/Unix and Windows environments.

Responsibilities

• Managing and monitoring cryptographic assets and ensuring their security.
• Conducting security assessments and implementing cryptographic solutions.
• Leading teams and advising on cryptographic policies and practices.

Skills

PKI management

Linux/Unix

Windows

Scripting (Python, Shell)

Incident response

Automation tools

Job description

Join us as an AVP Cryptography PKI Engineer and play a critical role in fortifying our cryptography infrastructure by supporting the design, configuration, implementation, and maintenance of robust PKI solutions to support encryption, authentication, and digital signing processes as part of a 24/7 global operations team. You will also be responsible for embedding the necessary elasticity to support the modern ecosystem and the post-quantum landscape.

To be successful, you should have experience with:

• PKI (Public Key Infrastructure), setting up and managing digital certificates and certificate authorities.
• Certificate Management platforms such as Venafi or Keyfactor.
• HSMs (Hardware Security Modules) like Thales or Entrust for secure key storage.

Additional valued skills include:

• Proficiency in Linux/Unix and Windows, especially for managing cryptographic systems.
• Knowledge of standards such as NIST, FIPS, ISO27001/27002.
• Incident response related to cryptographic assets.
• Scripting skills (e.g., Python, Shell) for automation.
• Familiarity with automation tools like CI/CD pipelines, templating engines, and orchestration tools.

This role is based in our Knutsford office and involves managing and monitoring cryptographic assets, ensuring the confidentiality, integrity, and authenticity of sensitive data, through BAU and On-Call support as part of a 24/7 global team.

Key responsibilities include:

• Understanding cryptographic needs across the organization and sharing best practices.
• Conducting security assessments and penetration testing to identify vulnerabilities.
• Implementing and monitoring cryptographic solutions in banking applications.
• Developing training content and technical documentation on cryptography.
• Supporting the service management of cryptography solutions, including incident, problem, change, and vulnerability management.
• Understanding cryptographic principles and advocating security improvements.
• Presenting complex ideas effectively to diverse audiences.

As an AVP, your responsibilities also include:

• Advising on decision-making, policy development, and operational effectiveness.
• Leading a team or guiding collaborative projects.
• Demonstrating leadership behaviors such as listening, inspiring, aligning, and developing others.
• Managing risks and strengthening controls related to cryptography.
• Engaging in data analysis and complex problem-solving.
• Communicating complex information clearly and influencing stakeholders.

All colleagues are expected to embody Barclays' values of Respect, Integrity, Service, Excellence, and Stewardship, and to demonstrate the Barclays Mindset of Empower, Challenge, and Drive.