Systems Engineer-Cryptographic

Endava; United States; Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive salary package

Share plan

Performance bonuses

Career development opportunities

Internal tech communities

Hybrid work and flexible hours

Wellbeing program

401(k) retirement plan

Job summary

Endava seeks a seasoned Directory Services Engineer in the United States to lead the optimization and automation of cryptographic platforms, focusing on certificate management, PKI design, and secure deployments.

You will collaborate with cross‑functional teams to define roadmaps, implement risk mitigation, and automate workflows using PowerShell and CI/CD pipelines, while ensuring compliance with security standards and industry best practices.

Qualifications

• 7–10 years managing certificates and cryptographic platforms.
• 5+ years in Directory Services/DevOps automating secrets workflows.
• PowerShell is required.
• Experience with HSM deployment, management, and troubleshooting.
• Expert knowledge of PKI concepts and deployment architecture.
• Experience with CyberArk and HashiVault preferred.
• Demonstrated experience with cloud-based infrastructure such as GCP, Azure (especially Azure Key Vault), or AWS.
• Knowledge of API integrations and developing integrations between applications using existing APIs.
• Proven experience deploying infrastructure as code and supporting CI/CD pipelines.
• 5+ years working with cross-functional technical and project teams on IT solutions.
• Understanding of incident, request, problem, and change management.
• Ability to communicate effectively between Business Owners, PMs and Operations Teams.

Responsibilities

• Lead the optimization and enhancement of Client’s cryptographic platforms, including systems integration and automation.
• Contributes to design and implementation of risk mitigation and system hardening controls.
• Escalation points for admins on the Directory Services team and assisting with automation of routine tasks.
• Help design and maintain engineering roadmaps and priorities for the Directory Services team.
• Manage timelines and deliverables for engineering priorities and pilots/POCs.
• Participate in Engineering forums and steering committees.
• Other engineering duties as assigned.

Skills

Certificate management

Keyfactor

DevOps engineering

PowerShell

HSM management

PKI concepts

CyberArk

HashiCorp Vault

Cloud platforms

API integrations

CI/CD pipelines

Cross-functional teams

Incident/Change management

Communication

Tools

Azure Key Vault

HashiCorp Vault

Keyfactor

GCP

AWS

Job description

Technology is our how. And people are our why. For over two decades, we have been harnessing technology to drive meaningful change.

By combining world-class engineering, industry expertise and a people-centric mindset, we consult and partner with leading brands from various industries to create dynamic platforms and intelligent digital experiences that drive innovation and transform businesses.

From prototype to real-world impact - be part of a global shift by doing work that matters.

Job Description

• Lead the optimization and enhancement of Client’s cryptographic platforms, including systems integration and automation, as well as preparing for foreseeable future changes in the industry.
• Contributes to design and implementation of risk mitigation and system hardening controls such as delegation management, monitoring, patching, and optimization.
• Escalation points for admins on the Directory Services team. Supporting admins on complex issue resolution and helping to automate routine tasks performed by the Directory Services admins and other teams.
• Responsible for helping to design and maintain engineering roadmaps and priorities for the Directory Services team.
• Manage timelines and deliverables for engineering priorities as defined in the engineering roadmaps. Support the management of pilot or POC initiatives as approved by ARB.
• Active participation and contribution in Engineering forums such as subcommittees, engineering meetings, new technology meetings, and steering committees.
• Other engineering duties as assigned.

Qualifications

• 7-10 years of experience managing certificates and other cryptographic platforms.
• Experience with Keyfactor certificate platforms is highly preferred.
• 5+ years’ experience in an engineering capacity in the Directory Services/DevOps space developing and automating workflows for secrets management.
• PowerShell experience is required.
• Experience with HSM platform deployment, management, and troubleshooting.
• Expert knowledge of certificate and PKI concepts along with deployment architecture design and management.
• Experience with CyberArk and HashiVault preferred.
• Demonstrated experience with cloud-based infrastructure such as GCP, Azure (especially azure KeyVault), or AWS required
• Knowledge of API integrations. Demonstrated ability to develop integrations between applications leveraging existing APIs is preferred.
• Proven experience deploying infrastructure as code; developing and supporting CI\CD pipelines.
• 5+ years’ experience working with cross-functional technical and project teams on the development and delivery of IT solutions.
• Understanding of incident, request, problem, and change management.
• Ability to communicate effectively between Business Owners, Project Managers (PMs) and Operations Teams.

Additional Information

Discover some of the global benefits that empower our people to become the best version of themselves:

• Finance:Competitive salary package, share plan, company performance bonuses, value-based recognition awards, referral bonus;
• Career Development: Career coaching, global career opportunities, non-linear career paths, internal development programmes for management and technical leadership;
• Learning Opportunities:Complex projects, rotations, internal tech communities, training, certifications, coaching, online learning platforms subscriptions, pass-it-on sessions, workshops, conferences;
• Work-Life Balance:Hybrid work and flexible working hours, employee assistance programme;
• Health:Global internal wellbeing programme, access to wellbeing apps;
• Community:Global internal tech communities, hobby clubs and interest groups, inclusion and diversity programmes, events and celebrations.

Additional Employee Requirements

• Participation in both internal meetings and external meetings via video calls, as necessary.
• Ability to go into corporate or client offices to work onsite, as necessary.
• Prolonged periods of remaining stationary at a desk and working on a computer, as necessary.
• Ability to bend, kneel, crouch, and reach overhead, as necessary.
• Hand-eye coordination necessary to operate computers and various pieces of office equipment, as necessary.
• Vision abilities including close vision, toleration of fluorescent lighting, and adjusting focus, as necessary.
• For positions that require business travel and/or event attendance, ability to lift 25 lbs, as necessary.
• For positions that require business travel and/or event attendance, a valid driver’s license and acceptable driving record are required, as driving is an essential job function.

*If requested, reasonable accommodations will be made to enable employees requiring accommodations to perform the essential functions of their jobs, absent undue hardship.

USA Benefits (Full time roles only, does not apply to contractor positions)

• Robust healthcare and benefits including Medical, Dental, vision, Disability coverage, and various other benefit options
• Flexible Spending Accounts (Medical, Transit, and Dependent Care)
• Employer Paid Life Insurance and AD&D Coverages
• Health Savings account paired with our low-cost High Deductible Medical Plan
• 401(k) Safe Harbor Retirement plan with employer match with immediately vest

At Endava, we’re committed to creating an open, inclusive, and respectful environment where everyone feels safe, valued, and empowered to be their best. We welcome applications from people of all backgrounds, experiences, and perspectives—because we know that inclusive teams help us deliver smarter, more innovative solutions for our customers. Hiring decisions are based on merit, skills, qualifications, and potential. If you need adjustments or support during the recruitment process, please let us know.

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply