PKI Architect/Head of Architecture

ZipRecruiter; Corsham; On-site; GBP 70,000 - 90,000; Full time

Job summary

A leading company is looking for a Head of Architecture to lead the technical vision and strategy for PKI solutions. This role combines hands-on solution architecture with leadership responsibilities, overseeing client delivery projects and internal architecture functions. The successful candidate will play a vital role in shaping the organization’s technology offerings while managing a team.

Qualifications

• Expertise in PKI technologies and standards (X.509, SSL/TLS).
• Hands-on experience with relevant PKI tools.
• Experience leading a team and engaging stakeholders.

Responsibilities

• Lead technical discussions and solution scoping with clients.
• Design end-to-end PKI solutions tailored to client needs.
• Mentor team members and manage the architecture pipeline.

Skills

Expertise in PKI technologies and standards

Strong understanding of cryptographic algorithms

Stakeholder engagement

Analytical mindset

Problem-solving capability

Education

CISSP

CISM

CompTIA Security+

TOGAF

Tools

Keyfactor Command

Venafi TLS Protect

EJBCA

Microsoft AD CS

HSMs (Thales Luna, EnTrust nCipher)

AWS

Azure

Job description

Job Description

The Head of Architecture will be responsible for leading the technical vision, design integrity, and strategic direction of all architecture-related activities within the organisation. This is a dual role combining hands-on solution architecture for client delivery projects with the leadership and management of the internal architecture function. The successful candidate will operate as the senior-most technical authority, shaping our PKI solution portfolio, guiding technical governance, and ensuring architectural alignment with client and organisational objectives.

This role would suit an experienced PKI Architect who is looking to move into a leadership/managerial role whilst maintaining a connection with technology, overseeing delivery activities.

Responsibilities:

Pre-Sales & Client Engagement

• Lead technical discussions and solution scoping with prospective clients.
• Translate business and technical requirements into detailed, costed proposals.
• Educate stakeholders on PKI fundamentals, compliance, and industry best practices.
• Represent Unsung in pre-sales workshops, guiding clients through solution considerations.

Solution Architecture & Delivery

• Design end-to-end PKI solutions tailored to client environments and regulatory needs.
• Oversee implementation of Certificate Authorities (CA), Registration Authorities (RA), and supporting infrastructure.
• Collaborate with internal teams, client stakeholders, and third-party vendors to ensure timely and quality delivery.
• Produce architectural documentation including Solution Architecture Documents (SAD) High-Level Designs (HLD), policies, procedures, and training materials.
• Support risk management within project delivery.

Internal Innovation & Continuous Improvement

• Develop reusable design patterns, standards, and solution building blocks.
• Contribute to the evolution of Unsung’s architectural maturity and strategic direction.
• Assess new and emerging technology and its suitability for in Unsung delivered solutions and services.
• Identify opportunities for innovation and facilitate innovation experiments/de-risking.

Team Leadership

• Own and manage the Architecture pipeline and tasking and resourcing of the architecture team.
• Mentor direct reports on technical and soft skills.
• Arrange and execute team meetings, 1-1 sessions and formal review cycles for direct reports.
• Maintain and renew contracts for associates (Contractors)
• Deliver internal knowledge-sharing sessions and architecture-focused training.
• Support hiring and onboarding activities by leveraging your industry network.

Personal Growth & Industry Engagement

• Stay up-to-date with emerging technologies in cryptography and PKI.
• Attend and speak at vendor/sales events as a trusted advisor/thought leader.
• Actively engage in personal development and contribute to Unsung’s growth journey.

Technical Skills and Experience

Essential:

• Expertise in PKI technologies and standards (X.509, SSL/TLS, S/MIME).
• Strong understanding of cryptographic algorithms, key management, and code signing.
• Hands-on experience with tools such as:
• Keyfactor Command, Venafi TLS Protect, AppViewX CERT+, DigiCert One
• EJBCA, Microsoft AD CS, Entrust Security Manager
• HSMs (Thales Luna, EnTrust nCipher), Fortanix DSM
• Familiarity with cloud infrastructure experience (AWS, Azure).
• Familiarity with regulatory frameworks: NIST, GDPR, etc.
• Proficiency in technical documentation (MS Word, Visio, PowerPoint, Excel).

Soft Skills and Experience

Essential:

• Experience of leading a team
• Strong stakeholder engagement and communication.
• Analytical mindset and problem-solving capability.
• Detail-oriented and compliance-focused.
• Leadership, decision-making, and influencing skills.
• Comfortable working independently and in cross-functional teams.

Qualifications & Experience

Desirable:

• CISSP, CISM,
• CompTIA Security+, or a recognised Vendor Certification (Thales, Venafi, Keyfactor, AppviewX)
• TOGAF

Security Clearance: SC required, DV .