Cryptographic Services Architect - SC cleared

Evodia Limited; Crawley, Reading, Doncaster; Hybrid; GBP 101,000 - 157,000; Full time

Job summary

Evodia Limited invites a seasoned Cryptographic Services Architect to join a Defence sector project on a 3-month contract. The role focuses on enterprise PKI design, HSMs and post-quantum strategies within a highly regulated setting.

Hybrid UK work locations include Crawley, Reading or Doncaster, with initial one day onsite per week and increasing flexibility. You will own architectural work from bid to delivery, produce detailed designs, and lead technical discussions with stakeholders to

Qualifications

• Proven experience in designing enterprise PKI and cryptographic solutions.
• Deep understanding of CA architectures and certificate lifecycle management.
• SC clearance is essential.
• Strong ability to translate complex technical concepts for business stakeholders.
• Experience in highly regulated/security-sensitive environments.

Responsibilities

• Lead the design and delivery of cryptographic solutions, including PKI, Key Management, HSMs, and post-quantum strategies.
• Produce High-Level Designs, requirements specifications and testing artefacts from bid to delivery.
• Provide technical leadership and present solutions to stakeholders with architectural integrity.
• Oversee integration, testing, acceptance, and knowledge transfer to operations teams.
• Collaborate with bid teams, engineers and customers to manage risks and future-proof cryptographic solutions.

Skills

PKI architecture

Cryptographic solutions

Stakeholder communication

Architectural leadership

Tools

Keyfactor

EJBCA

ADCS

Azure Certificate Services

Evertrust

Job description

Are you a seasoned Architect with extensive experience in enterprise PKI and cryptographic architecture? If so, we’ve got an exciting opportunity on behalf of our client, a leading defence company seeking a Contract Cryptographic Services Architect for an initial 3-month engagement. This SC cleared role offers flexible working locations including Crawley, Reading or Doncaster, with the option of hybrid working, initially one day onsite per week but this is expected to increase so some flexibility is required. It’s a fantastic chance to shape secure communications and information systems in a mission-critical environment.

What you’ll do:

• Lead the design and delivery of cryptographic solutions, including PKI, Key Management, Hardware Security Modules, and emerging post-quantum cryptography strategies.
• Take ownership of architectural work from bid to delivery, producing detailed High-Level Designs (HLDs), requirements specifications, and testing artefacts.
• Provide technical leadership, presenting solutions confidently to stakeholders and ensuring architectural integrity throughout project lifecycles.
• Guide integration activities, oversee testing and acceptance, and support knowledge transfer into operational teams.
• Collaborate closely with bid teams, engineers, security specialists, and customer stakeholders, managing technical risks and recommending future-proof cryptographic solutions.

What we’re looking for:

• Proven experience in designing and delivering enterprise PKI and cryptographic solutions with platforms such as Keyfactor, EJBCA, ADCS, Azure Certificate Services, or Evertrust.
• Deep understanding of CA architectures, certificate lifecycle management, root of trust, and digital signatures.
• Hands-on experience in cryptographic solution architecture, especially within highly regulated or security-sensitive environments.
• Strong stakeholder communication skills and the ability to translate complex technical concepts into clear business recommendations.
• Existing SC clearance is essential.

Desirable qualifications:

• Knowledge of Post-Quantum Cryptography (PQC) planning and migration.
• Familiarity with cryptographic standards from NCSC, NIST, ETSI, ISO, or IEC.
• Skills in scripting and automation (PowerShell, Python, Bash).
• Experience with Identity & Access Management (IAM), cloud security, or critical national infrastructure environments.

This position offers a competitive, negotiable day rate and the chance to work on pioneering cryptographic projects that have a real impact in the defence sector.