Cryptography Lead

Job Description

We are seeking an experienced Cryptography Lead SME to lead the deployment, integration, and operational management of the Agile Sec Analytics Platform within a large enterprise environment.

This role requires deep expertise in PKI, certificate lifecycle management, TLS/SSL, platform engineering, automation, and security operations.

The successful candidate will provide technical leadership, drive platform reliability, and enable Security-as-Code initiatives across enterprise infrastructure.

• Platform Engineering & Leadership:
  Lead the onboarding, deployment, integration, and operationalization of the Agile Sec Analytics platform.
• Own platform architecture, configuration management, upgrades, patching, and operational readiness.
• Ensure platform scalability, performance, and high availability.
• PKI & Certificate Management:
  Manage the complete certificate lifecycle including issuance, renewal, revocation, rotation, and trust store management.
• Implement enterprise certificate discovery using Agile Sec and Cipher Insights to identify unknown certificates and machine identities.
• Troubleshoot TLS/SSL handshake issues, certificate chain validation, trust failures, OCSP/CRL validation, and certificate expiration incidents.
• Integrate and administer Keyfactor or equivalent PKI management platforms.
• Automation & Integration:
  Design and implement secure REST API and webhook integrations.
• Develop automated certificate management workflows integrated with CI/CD pipelines.
• Build Infrastructure-as-Code and Security-as-Code solutions using Terraform, Ansible, and scripting languages.
• Platform Monitoring & Analytics:
  Develop dashboards, monitoring, and reporting using Open Search, ELK, and Splunk.
• Configure platform monitoring, alerting, and operational health dashboards.
• Support analytics and reporting for certificate and platform operations.
• Infrastructure & Cloud:
  Administer Linux-based environments and Kubernetes platform services.
• Integrate Agile Sec and Keyfactor with AWS, Azure, F5, NGINX, IIS, Kubernetes, and enterprise infrastructure components.
• Perform platform upgrades, tuning, troubleshooting, and incident resolution.
• Leadership &
  
  Collaboration:
  
  Act as the technical lead for Security, Infrastructure, Engineering, and Operations teams.
• Lead troubleshooting of certificate-related outages and platform incidents.
• Develop technical documentation, operational procedures, administrator guides, and support runbooks.
• Mentor junior engineers and promote knowledge sharing and best practices.

• Strong expertise in PKI, certificate lifecycle management, and enterprise cryptography.
• Hands-on experience with Keyfactor or equivalent PKI management platforms.
• Deep knowledge of TLS/SSL, certificate validation, trust chains, OCSP, and CRL.
• Experience with Open Search, ELK Stack, and Splunk.
• Strong Linux administration and Kubernetes platform management experience.
• Experience integrating enterprise platforms using REST APIs and webhooks.
• Hands-on experience with CI/CD and automation tools including:
  Azure Dev Ops, Git Hub Actions, Jenkins, Terraform, Ansible, Helm. Proficiency in Python, Power Shell, and Bash scripting.
• Experience integrating enterprise security platforms with AWS, Azure, F5, NGINX, IIS, and Kubernetes.

• Strong technical leadership and mentoring skills.
• Excellent communication and stakeholder management abilities.
• Strong analytical and problem-solving skills.
• Passion for automation, Dev Sec Ops , and Security-as-Code.
• Ability to lead enterprise-scale security platform implementations and operational support.