System Security Engineer

· Work closely with IT Security Architects (Cryptography and PKI), implementation partners (CLM, EKMS), CA/PKI operators, and application owners to implement and operationalize certificate and key management solutions using best‑of‑breed technology and methodology.

· Conduct requirement workshops with application teams and platform owners, analyze certificate and key management requirements holistically across on‑premises and Cloud (AWS) estates.

· Contribute to, influence, and review the design of CLM and EKMS solutions to ensure they meet both security and operational needs; demonstrate technical depth in PKI, certificate lifecycle, and key management.

· Setup, improve, and streamline certificate and key management operational processes (issuance, renewal, revocation, discovery, rotation, escrow) for continuous improvement and to eliminate outage risk from expiry.

· Incorporate cryptographic and key management best practices (FIPS, NIST, X.509, PKCS)...