Cryptography Lead

Job Description · We are seeking an experienced Cryptography Lead SME to lead the deployment, integration, and operational management of the AgileSec Analytics Platform within a large enterprise environment. · This role requires deep expertise in PKI, certificate lifecycle management, TLS/SSL, platform engineering, automation, and security operations. · The successful candidate will provide technical leadership, drive platform reliability, and enable Security-as-Code initiatives across enterprise infrastructure. Key Responsibilities · Platform Engineering & Leadership Lead the onboarding, deployment, integration, and operationalization of the AgileSec Analytics platform. · Own platform architecture, configuration management, upgrades, patching, and operational readiness. · Ensure platform scalability, performance, and high availability. · PKI & Certificate Management Manage the complete certificate lifecycle including issuance, renewal, revocation, rotation, and trust store management. · Implement enterprise certificate discovery using AgileSec and Cipher Insights to identify unknown certificates and machine identities. · Troubleshoot TLS/SSL handshake issues, certificate chain validation, trust failures, OCSP/CRL validation, and certificate expiration incidents. · Integrate and administer Keyfactor or equivalent PKI management platforms. · Automation & Integration Design and implement secure REST API and webhook integrations. · Develop automated certificate management workflows integrated with CI/CD pipelines. · Build Infrastructure-as-Code and Security-as-Code solutions using Terraform, Ansible, and scripting languages. · Platform Monitoring & Analytics Develop dashboards, monitoring, and reporting using OpenSearch, ELK, and Splunk. · Configure platform monitoring, alerting, and operational health dashboards. · Support analytics and reporting for certificate and platform operations. · Infrastructure & Cloud Administer Linux-based environments and Kubernetes platform services. · Integrate AgileSec and Keyfactor with AWS, Azure, F5, NGINX, IIS, Kubernetes, and enterprise infrastructure components. · Perform platform upgrades, tuning, troubleshooting, and incident resolution. · Leadership & Collaboration Act as the technical lead for Security, Infrastructure, Engineering, and Operations teams. · Lead troubleshooting of certificate-related outages and platform incidents. · Develop technical documentation, operational procedures, administrator guides, and support runbooks. · Mentor junior engineers and promote knowledge sharing and best practices. Required Skills & Experience · Strong expertise in PKI, certificate lifecycle management, and enterprise cryptography. · Hands-on experience with Keyfactor or equivalent PKI management platforms. · Deep knowledge of TLS/SSL, certificate validation, trust chains, OCSP, and CRL. Experience with OpenSearch, ELK Stack, and Splunk. · Strong Linux administration and Kubernetes platform management experience. · Experience integrating enterprise platforms using REST APIs and webhooks. · Hands-on experience with CI/CD and automation tools including: Azure DevOps GitHub Actions Jenkins Terraform Ansible Helm Proficiency in Python, PowerShell, and Bash scripting. · Experience integrating enterprise security platforms with AWS, Azure, F5, NGINX, IIS, and Kubernetes. Preferred Attributes · Strong technical leadership and mentoring skills. · Excellent communication and stakeholder management abilities. · Strong analytical and problem-solving skills. · Passion for automation, DevSecOps, and Security-as-Code. · Ability to lead enterprise-scale security platform implementations and operational support.