Information Security Engineer – PKI, Systems

Endava

Senior Identity & Encryption Engineer specializing in Public Key Infrastructure and enterprise security solutions at Endava. Leading technical architecture and automation in complex environments.

Posted 7/2/2026full-timeRemote • 🇺🇸 United StatesSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in PKI architecture, certificate lifecycle management, and cryptographic services, with a strong focus on automation and integration within cloud environments. Proven ability to lead cross-functional teams in delivering scalable security solutions and optimizing enterprise workflows.

Highest-signal resume keywords

PKI ArchitectureCertificate Lifecycle ManagementPowerShell ScriptingInfrastructure as Code (IaC)Cloud Platforms (Azure, AWS, Google Cloud)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

PKI DesignCertificate ManagementCryptographic ServicesAutomation SolutionsREST API IntegrationHardware Security Modules (HSM) ManagementCI/CD Pipeline DesignSecrets ManagementPlatform HardeningEngineering Standards Definition

Soft Skills

Excellent CommunicationTechnical LeadershipCollaboration

Tools & Technologies

Azure Key VaultAutomation FrameworksDevOps Platforms

Industry Keywords

Enterprise Security Best PracticesIncident ManagementProblem ManagementRequest ManagementChange Management

Tech Stack

Tools & technologies

AWSAzureCloudVault

About the role

Key responsibilities & impact

Lead the design, modernization, and optimization of enterprise PKI and certificate management platforms.
Provide technical leadership for certificate lifecycle management, secrets management, and cryptographic services across hybrid and cloud environments.
Design and implement automated, scalable certificate provisioning and renewal processes using modern engineering practices.
Develop self-service capabilities that enable development and infrastructure teams to securely request and provision certificates with minimal manual intervention.
Design and implement API-driven integrations that enable CI/CD pipelines and DevOps platforms to securely interact with enterprise secrets management solutions.
Maximize the value of existing security platforms by standardizing enterprise workflows, eliminating siloed solutions, and driving adoption of centralized services.
Define engineering standards, best practices, and architectural patterns for PKI, certificate management, and secrets management.
Serve as the senior technical escalation point for complex cryptographic platform issues and mentor engineering teams on automation and operational excellence.
Contribute to platform hardening through secure configuration, delegation models, monitoring, patch management, and continuous optimization.
Develop engineering roadmaps and implementation strategies aligned with client business objectives and evolving security requirements.
Partner with cross-functional engineering, infrastructure, DevOps, security, and application teams to deliver scalable enterprise identity and encryption solutions.
Evaluate emerging technologies and industry trends to ensure long-term platform sustainability and future readiness.

Requirements

What you’ll need

7–10+ years of experience designing, implementing, and managing enterprise PKI, certificate lifecycle management, or cryptographic platforms.
Deep expertise in PKI architecture, certificate management strategies, cryptographic services, and enterprise security best practices.
5+ years of engineering experience building automation solutions within Identity, Directory Services, or DevOps environments.
Strong PowerShell scripting and automation experience.
Experience designing and supporting Infrastructure as Code (IaC) and CI/CD pipelines.
Experience integrating enterprise platforms through REST APIs and automation frameworks.
Hands-on experience deploying, managing, and troubleshooting Hardware Security Modules (HSMs).
Experience with cloud platforms including Azure, AWS, or Google Cloud, with strong knowledge of Azure Key Vault or equivalent cloud secrets management services.
Demonstrated experience collaborating with cross-functional technical teams to deliver enterprise infrastructure and security solutions.
Strong understanding of incident, problem, request, and change management processes.
Excellent communication skills with the ability to engage technical teams, architects, project managers, and business stakeholders.

Benefits

Comp & perks

Competitive salary package
Share plan
Company performance bonuses
Value-based recognition awards
Referral bonus
Career coaching
Global career opportunities
Non-linear career paths
Internal development programmes for management and technical leadership
Complex projects
Rotations
Internal tech communities
Training
Certifications
Coaching
Online learning platforms subscriptions
Pass-it-on sessions
Workshops
Conferences
Hybrid work and flexible working hours
Employee assistance programme
Global internal wellbeing programme
Access to wellbeing apps
Global internal tech communities
Hobby clubs and interest groups
Inclusion and diversity programmes
Events and celebrations