Cryptography Lead Engineer

HCL Technologies Limited; Leeds; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Term life insurance

Business travel insurance

Vacation entitlement

Job summary

HCL Technologies Limited in Leeds, UK, is seeking an experienced Cryptography Lead Engineer to design, implement, automate, and operate enterprise cryptography solutions across multi-cloud and on-prem environments.

You will lead PKI architecture, CLM, and HSM programs, with hands-on work on AppViewX and Keyfactor Command, integrating with PKI platforms and ITSM tools.

The role is based in Leeds with hybrid work: two days per week remote from client site and two days on client location.

Qualifications

• Experience designing and managing Enterprise PKI environments.

Responsibilities

• Lead the architecture, deployment, and operations of Enterprise PKI environments.

Skills

PKI

HSMs

Certificate Lifecycle Management

AppViewX

Keyfactor Command

Automation

REST APIs

PowerShell

Python

CI/CD

Cloud platforms

DevSecOps

Security standards

Tools

AppViewX

Keyfactor Command

Thales

Entrust

Luna

nCipher

Job description

We are a $13+ billion global technology company, home to more than 224,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud, and AI, powered by a broad portfolio of technology services and products.

HCLTech is a globally recognized leader in the Tech and IT industry, but we've never forgotten the startup mindset that got us here. We've always approached our work with an idea-first attitude because every one of our accomplishments -no matter how big or small -can be traced back to an ideas' single spark.

It's that spark -that inner drive -that sets our people apart from our competitors. It enables us not just to pull off game-changing feat after game-changing feat but to better our world in the process. We want you to find your spark. Because that's what drives you to be better, be more and ultimately, be more fulfilled.

To learn more about how we can supercharge progress for you, visit www.hcltech.com

Job Title: Cryptography Lead Engineer

Location: Leeds, UK (Hybrid mode- 2 days week (Work from client location))

Job Summary

We are seeking an experienced Cryptography Lead Engineer to lead the design, implementation, automation, and operational management of enterprise cryptography solutions. The ideal candidate will possess strong expertise in Public Key Infrastructure (PKI), Certificate Lifecycle Management (CLM), Hardware Security Modules (HSMs), and certificate automation platforms such as AppViewX and Keyfactor Command.

The role will be responsible for driving enterprise-wide cryptographic strategy, certificate governance, automation initiatives, security compliance, and operational excellence across complex multi-cloud and on-premises environments.

Key Responsibilities

• Lead the architecture, deployment, and operations of Enterprise PKI environments.
• Design and manage Certificate Authority (CA) hierarchies, certificate policies, and trust models.
• Develop cryptographic standards, guidelines, and best practices across the organization.
• Ensure compliance with industry standards and regulatory requirements related to cryptography and certificate management.

Certificate Lifecycle Management (CLM)

• Implement and manage enterprise Certificate Lifecycle Management solutions.
• Automate certificate issuance, renewal, revocation, and discovery processes.
• Develop processes to eliminate certificate-related outages and reduce operational risks.
• Define certificate governance and lifecycle policies across enterprise environments.
• Manage and enhance AppViewX platform implementations.
• Design workflows for certificate automation and lifecycle management.
• Configure integrations with PKI platforms, ITSM tools, Load Balancers, Web Servers, and Cloud platforms.
• Support certificate discovery, monitoring, reporting, and compliance dashboards.

Keyfactor Command Engineering

• Configure and administer Keyfactor Command platform.
• Develop and maintain integrations between Keyfactor and enterprise PKI environments.
• Automate certificate enrollment and lifecycle management using Keyfactor workflows.
• Support inventory management, certificate monitoring, and remediation activities.

Hardware Security Module (HSM) Management

• Design and manage HSM infrastructure (Thales, Entrust, Luna, nCipher, or equivalent).
• Perform key generation, storage, protection, backup, and recovery activities.
• Ensure secure cryptographic key lifecycle management.
• Support HSM integrations with PKI and certificate management platforms.

Automation & DevSecOps

• Develop automation solutions using PowerShell, Python, REST APIs, and scripting frameworks.
• Implement Infrastructure-as-Code and CI/CD integrations for certificate automation.
• Integrate certificate management with cloud-native services and enterprise applications.
• Enable self-service certificate provisioning where appropriate.

Security & Compliance

• Support audits and compliance initiatives.
• Maintain cryptographic controls aligned with NIST, PCI-DSS, ISO 27001, SOC2, and industry standards.
• Conduct risk assessments related to certificate and key management.
• Ensure cryptographic inventory and reporting capabilities are maintained
• A supportive, diverse, and global team with a brilliant culture.
• Competitive compensation and benefits that includes vacation per year, various insurances like Term life and Business Travel insurance. These are apart from the statutory benefits applicable in the country. Employee benefits are regulated by an internal policy that contains full details regarding the entitlement and conditions for the benefits as per the law of the land.
• Great opportunities to make the role your own, upskill yourself and get involved with exciting projects.
• Total Wellbeing is our focus. Alongside your professional excellence, you join the likeminded colleagues to create a larger impact within the company and society at large in your chosen area of passion - CSR Council, Diversity Council, Women Connect, Sparks - Engagement Champion to name a few.
• To know more about us visit - www.hcltech.com
• For more information on how we process your personal data, please refer to HCLTech's Candidate Data Privacy Notice.