Cryptography Lead

· We are seeking an experienced Cryptography Lead SME to lead the deployment, integration, and operational management of the AgileSec Analytics Platform within a large enterprise environment.

· This role requires deep expertise in PKI, certificate lifecycle management, TLS/SSL, platform engineering, automation, and security operations.

· The successful candidate will provide technical leadership, drive platform reliability, and enable Security-as-Code initiatives across enterprise infrastructure.

Key Responsibilities

· Platform Engineering & Leadership Lead the onboarding, deployment, integration, and operationalization of the AgileSec Analytics platform.

· Own platform architecture, configuration management, upgrades, patching, and operational readiness.

· Ensure platform scalability, performance, and high availability.

· PKI & Certificate Management Manage the complete certificate lifecycle including issuance, renewal, revocation, rotation, and trust store management.

· Implement enterprise certificate discovery using AgileSec and Cipher Insights to identify unknown certificates and machine identities.

· Troubleshoot TLS/SSL handshake issues, certificate chain validation, trust failures, OCSP/CRL validation, and certificate expiration incidents.

· Integrate and administer Keyfactor or equivalent PKI management platforms.

· Automation & Integration Design and implement secure REST API and webhook integrations.

· Develop automated certificate management workflows integrated with CI/CD pipelines.

· Build Infrastructure-as-Code and Security-as-Code solutions using Terraform, Ansible, and scripting languages.

· Platform Monitoring & Analytics Develop dashboards, monitoring, and reporting using OpenSearch, ELK, and Splunk.

· Configure platform monitoring, alerting, and operational health dashboards.

· Support analytics and reporting for certificate and platform operations.

· Infrastructure & Cloud Administer Linux-based environments and Kubernetes platform services.

· Integrate AgileSec and Keyfactor with AWS, Azure, F5, NGINX, IIS, Kubernetes, and enterprise infrastructure components.

· Perform platform upgrades, tuning, troubleshooting, and incident resolution.

· Leadership & Collaboration Act as the technical lead for Security, Infrastructure, Engineering, and Operations teams.

· Lead troubleshooting of certificate-related outages and platform incidents.

· Develop technical documentation, operational procedures, administrator guides, and support runbooks.

· Mentor junior engineers and promote knowledge sharing and best practices.

Required Skills & Experience

· Strong expertise in PKI, certificate lifecycle management, and enterprise cryptography.

· Hands-on experience with Keyfactor or equivalent PKI management platforms.

· Deep knowledge of TLS/SSL, certificate validation, trust chains, OCSP, and CRL.

Experience with OpenSearch, ELK Stack, and Splunk.

· Strong Linux administration and Kubernetes platform management experience.

· Experience integrating enterprise platforms using REST APIs and webhooks.

· Hands-on experience with CI/CD and automation tools including: Azure DevOps GitHub Actions Jenkins Terraform Ansible Helm Proficiency in Python, PowerShell, and Bash scripting.

· Experience integrating enterprise security platforms with AWS, Azure, F5, NGINX, IIS, and Kubernetes.

Preferred Attributes

· Strong technical leadership and mentoring skills.

· Excellent communication and stakeholder management abilities.

· Strong analytical and problem-solving skills.

· Passion for automation, DevSecOps, and Security-as-Code.

· Ability to lead enterprise-scale security platform implementations and operational support.