Senior Engineer

New Zealand Government; Wellington; On-site; NZD 140,000 - 190,000; Full time

Benefits offered by this job

Life cover up to $300,000

Critical illness protection

Defence community savings schemes

Job summary

NZ Defence Force in Wellington seeks a Senior Engineer (PKI Specialist) to lead PKI/ICAM design, governance and identity security initiatives. You will shape cryptographic foundations, drive PKI policy standardisation and coordinate across technical and business teams to deliver secure, scalable identity solutions.

The role requires strong PKI expertise, modern cryptography knowledge, and experience with HSMs, CA/RA, TLS/X.509, and PQC awareness.

Qualifications

• Extensive PKI, cryptography and enterprise identity security experience.
• Experience with CA/RA, CRLs, trust chains and PKI protocols.
• Familiarity with PKI standards and certifications (FIPS, Common Criteria).

Responsibilities

• Design and evolve PKI/ICAM solutions aligned to organisational needs.
• Gather PKI identity requirements and develop high level ICAM designs.
• Standardise PKI policies, processes and controls across NZDF.
• Lead uplift of Identity Governance and Administration (IGA) capabilities.
• Implement access models and strengthen Privileged Access Management (PAM).
• Define onboarding/offboarding frameworks and drive ICAM delivery improvements.

Skills

PKI

Cryptography

IAM

HSM

TLS/X.509

Security standards

Stakeholder engagement

Education

Senior Engineer background

Tools

Certificate Authorities

ICAM

Job description

# Senior Engineer at NZ Defence Force, Wellington - Wairarapa## Mō tēnei tūranga mahi | About this role**Mō te tūnga | About the role**Join more than 15,000 New Zealanders working for the NZ Defence Force and directly contribute to the defence, security and wellbeing of Aotearoa New Zealand.We're looking for a Senior Engineer (PKI Specialist) to join our team within Information Command. This is a unique opportunity to lead and shape the way NZDF designs, delivers, and manages its Public Key Infrastructure and broader identity security capabilities.In this role, you will play a key part in strengthening our cryptographic and identity foundations, ensuring secure, scalable, and standards aligned solutions across the organisation. You will work closely with cross functional teams to uplift PKI and ICAM capability, while contributing to long term security strategy.This will include:* Designing and evolving PKI and ICAM solutions aligned to organisational needs* Gathering and documenting detailed PKI and identity requirements* Developing high level ICAM designs, with a focus on PKI components* Standardising PKI related policies, processes, and controls* Supporting data cleansing and alignment across identity systems* Driving uplift of Identity Governance and Administration (IGA) capabilities* Designing and implementing attribute-based and role-based access models* Improving Privileged Access Management (PAM) capabilities* Establishing onboarding and offboarding frameworks and processes* Leading the standardisation of access management practices across NZDF* Identifying and driving continuous improvement opportunities across ICAM deliveryOnce you have undergone training and are up to speed, there may be a requirement to go on an on-call roster for which you will be compensated.**Please note:** As this role requires a high level of security clearance, you will need to be / have been a NZ, UK, Australian, Canadian or USA citizen for a minimum of 10 years to be eligible for this role.The successful candidate is required to undergo a psychological assessment as part of the pre-employment security vetting process.**Ngā pūkenga me ngā wheako | Skills and Experience**To be successful in this role, you will be an experienced Senior Engineer with deep expertise in PKI, cryptography, and enterprise identity security. You will be comfortable operating in complex environments and influencing stakeholders across both technical and business domains.Ideally you will also bring:* Strong cryptographic knowledge, including RSA, ECC, hashing algorithms, and digital signatures* Proven experience with Certificate Authorities (CA), Registration Authorities (RA), Certificate Revocation Lists (CRLs), and trust chains* Proficiency in protocols such as TLS, SSL, X.509, SSH, and PKCS standards* Senior level experience with Hardware Security Modules (HSMs) and secure key management, including key ceremony processes* Understanding of Post-Quantum Cryptography (PQC) and its impact on organisations* Ability to contribute to and develop strategic direction, including PQC strategies* Familiarity with PKI standards and certifications (e.g. FIPS, Common Criteria) and their organisational implications* Strong problem-solving, communication, and stakeholder engagement skillsThis role requires occasional domestic travel, you will need to have a Class 1 Full Driver's Licence.**Nōu te rourou | What's in it for you**Your skills and dedication deserve recognition, and NZDF delivers with competitive pay matched to your experience. But that's just the beginning – safeguard your loved ones with a fully funded life cover of up to $300,000 and critical illness protection. Other benefits include discounted additional insurances, free will services and savings schemes for the Defence community. Get expert financial guidance and mortgage broker services. Find all our benefits and more on the Force 4 Families website.NZDF champions diversity and inclusivity, valuing every member and fuelling their success. We embrace uniqueness, understanding that diverse teams drive creativity, innovation, and excellence. With an open door to all – irrespective of gender, ethnicity, ability, age, or family dynamics – NZDF offers a flexible, empowering work environment. Join us in shaping a brighter future, where everyone thrives.**Me pēhea te tuku tono | How to Apply**Applications close on **Monday 5 October 2026**.Use the links on this page where you'll be directed to the Defence Careers website.**Please Note:*** All applications must be made online, via the Defence Careers website. Each listing contains the Position Description and a Contact Us option for any queries or technical issues.* Your cover letter will be a key part of our selection process, so please highlight how your experience relates to the key activities outlined in the Advert and Position Description.* Applicants will be required to undergo a pre-employment drug-screening test prior to any offer of employment being made.NZDF Employees/Members – please apply internally via the HR Toolkit; this will ensure that you are visible as an internal candidate.NZDF Contractors – please apply via the Defence Careers website.NZDF Reserves – please apply via the Defence Careers website if you cannot access the HR Toolkit.**Please Note:**To be eligible for the required level of government security clearance with the NZ Defence Force, you need to meet certain citizenship and residency criteria. Here's what you need to know:Higher Level Security Clearance* You **must** be a New Zealand Citizen for **at least** the last ten (10) years.* At minimum, **you must** hold New Zealand Permanent Residence **or** have a current New Zealand Residency Class Visa, **and** you must be a citizen of and have lived in Australia, Canada, United Kingdom, United States of America or New Zealand continuously for the last ten (10) years.* To obtain this level of clearance, you **must** have a background history of fifteen (15) years that can be verified and assessed appropriately by the NZ Security Intelligence Service (NZSIS) to determine if you are suitable for a security clearance at this level.If you do not meet the minimum criteria, unfortunately, your application will not be accepted. We do welcome your application at a time when you will meet the requirements.## Ngā taipitopito tūranga mahi | Job details| | || --- | --- || Employer: | NZ Defence Force || Location: | Wellington - Wairarapa || Position type: | Ongoing - Full Time || Category: | IT & computing || Date listed: | 18-Sep-2026 || Salary range: | N/A || Closing date: | 05-Oct-2026 || Reference: | NZ/DF-2609037 || Attachment: | No File Attached || File links: | || Website: | www.nzdf.mil.nz/ |