Cryptography Lead Engineer — PKI, HSM & Automation

HCL Technologies Limited; United Kingdom; Hybrid; GBP 75,000 - 110,000; Full time

Job summary

HCL Technologies Limited is seeking an experienced Cryptography Lead Engineer to drive enterprise cryptography strategy across multi-cloud and on-prem environments. You will lead PKI deployments, CA hierarchies, and certificate governance, while advancing automation platforms such as AppViewX and Keyfactor Command.

The role involves shaping cryptographic standards, ensuring regulatory compliance, and delivering secure, scalable solutions with DevSecOps practices in a hybrid, client-site setup.

Qualifications

• Experience leading enterprise PKI design, governance, and deployment.
• Strong knowledge of certificate lifecycle management and automation.
• Hands-on with HSM infrastructure and cryptographic key lifecycle.
• Proficient in scripting and automation (PowerShell, Python).
• Familiarity with cloud and on-prem certificate integrations.

Responsibilities

• Lead architecture, deployment, and operations of Enterprise PKI environments.
• Design CA hierarchies, policies, and trust models with governance.
• Develop cryptographic standards and best practices across the org.
• Ensure compliance with standards (NIST, PCI-DSS, ISO 27001, SOC2).
• Automate certificate issuance, renewal, and discovery with AppViewX/Keyfactor.
• Manage HSM integrations and secure key lifecycle across multi-cloud setups.

Skills

PKI

Certificate Management

HSM

Automation

DevSecOps

PowerShell

Python

REST APIs

CI/CD

Cloud & On-Prem

Tools

AppViewX

Keyfactor Command

Thales HSM

Entrust HSM

Luna HSM

nCipher

Job description

HCL Technologies Limited is seeking an experienced Cryptography Lead Engineer to drive enterprise cryptography strategy across multi-cloud and on-prem environments. You will lead PKI deployments, CA hierarchies, and certificate governance, while advancing automation platforms such as AppViewX and Keyfactor Command.

The role involves shaping cryptographic standards, ensuring regulatory compliance, and delivering secure, scalable solutions with DevSecOps practices in a hybrid, client-site setup.