PKI Cryptography Engineer

Join Barclays as a PKI Cryptography Engineer within the Chief Information Security Office (CISO), where you’ll play a vital role in protecting the organisation through secure and resilient PKI and digital certificate services used across the bank. In this role, you’ll provide support to users across Barclays, handling PKI and digital certificate queries while supporting and maintaining core PKI services. This includes certificate lifecycle management, infrastructure maintenance, and contributing to initiatives that move our services toward greater automation and autonomy, while staying up to date with industry best practices.

You’ll bring experience in PKI, cryptography, and lifecycle management, with any coding experience seen as a strong advantage. Knowledge of HSMs and Windows-based PKI environments is beneficial and will help you succeed in this technically hands‑on role.

The role follows anchor days on Monday and Tuesday and operates on standard UK hours (9 AM–5 PM), with 24/7 on‑call support rotation of 1 in every 8 weeks and paid overtime. You can expect occasional data centre visits to install hardware; while weekend on‑site attendance is not required,
weekend shift coverage may be scheduled as part of on‑call support.

• Strong understanding of PKI concepts, X.509 certificates, encryption algorithms, and certificate lifecycle.
• Exposure to enterprise PKI tools (Venafi, Digi Cert, Entrust, EJBCA), hands‑on experience managing Certificate Authorities, CRL/OCSP, and secure key storage (HSMs), including backup and disaster recovery procedures.
• Ability to diagnose and resolve certificate related issues across applications, networks, and operating systems, including trust chain failures, expired certificates, and misconfigurations.

• Experience with Power Shell, GO, Python, or Bash to automate certificate provisioning, renewal, and monitoring.
• Ability to enforce security policies, audit PKI environments, and ensure compliance with standards such as NIST, ISO 27001, and industry best practices.
• Familiarity with PKI in cloud platforms (AWS, Azure) and integrating certificates into CI/CD pipelines, containers, and Kubernetes environments.
• A clean driving license would be considered an advantage.

You may be assessed on the key critical skills relevant for success in role, such as risk and controls, change and transformation, business acumen, strategic thinking and digital and technology, as well as job‑specific technical skills.

The successful candidate will be based in Radbroke Hall, Knutsford.

To manage and monitor the bank’s cryptographic assets, for all use cases, whilst ensuring the confidentiality, integrity, and authenticity of sensitive data, both through BAU support and On‑Call support as part of a 24/7 global team.

• Collaboration with internal and external customers and stakeholders to understand and identify cryptographic needs across the organisation, sharing best practices including solutions to business applications and processes.
• Execution of security assessments and penetration testing to identify vulnerabilities in cryptographic implementations and procedures and guide the implementation of mitigation strategies and communicate findings to relevant senior stakeholders.
• Implementation and monitoring of cryptographic solutions used in various banking applications to ensure they function correctly and meet the Cryptography Standard.
• Development of training content for colleagues to share expertise on cryptographic concepts, best practice and security procedures in line with Standards and Industry regulations. Contribute to the creation of technical documentation and specifications related to cryptographic designs and implementations. Provision of subject matter expertise in cryptography methodologies.
• To manage and support the service management of cryptography solutions consumed by the Bank globally, in line with Technology Controls and Standards, including but not limited to Incident/Problem/Change/Vulnerability Management.
• Understanding of industry cryptographic…