PKI Engineer

The Role

This is a senior PKI Engineer opportunity responsible for the end-to-end delivery of a major enterprise Public Key Infrastructure program within a large and complex organisation.

Acting as the key technical SME for PKI and cryptographic services, you will lead the design and implementation of secure certificate management capabilities, establish supporting governance and operational practices, and ensure new PKI services transition effectively into production.

Working closely with cybersecurity, infrastructure, architecture, application teams and program stakeholders, you will combine deep hands-on PKI expertise with technical leadership. There is also strong scope to improve certificate lifecycle management through automation, scripting and modern operational practices.

Key Responsibilities:

• Lead the end-to-end technical delivery of enterprise PKI capabilities, providing subject matter expertise across cryptographic architecture, certificate management and supporting infrastructure.
• Design, implement and improve scalable PKI and certificate lifecycle solutions, ensuring alignment with enterprise security requirements, architectural standards and industry best practice.
• Develop PKI governance including security policies, Certificate Practice Statements, operational procedures and technical standards to support secure and auditable services.
• Drive automation across certificate provisioning, renewal, monitoring and lifecycle management, using scripting and modern engineering practices to reduce manual administration and operational risk.
• Provide technical guidance to cybersecurity, infrastructure, application and development teams on certificate integration, authentication, identity and cryptographic services.
• Design and manage the supporting infrastructure required to deliver resilient enterprise cryptographic services, including appropriate use of Hardware Security Modules and secure key management.
• Produce high-quality architecture diagrams, technical specifications, operating procedures and support documentation, ensuring solutions can transition effectively into BAU operations.
• Establish disaster recovery and business continuity capabilities for PKI services, including regular testing and validation of critical cryptographic infrastructure.

Skills & Experience Required:

• Extensive hands-on experience designing, implementing or managing enterprise Public Key Infrastructure, ideally as a senior PKI Engineer, Security Engineer or technical SME within a large-scale environment.
• Strong technical knowledge of *PKI, digital certificates, cryptographic algorithms, secure authentication protocols, key management and Hardware Security Modules (HSMs)* across enterprise or hybrid environments.
• Proven experience implementing certificate lifecycle management and automation, including scripting or automation pipelines covering certificate provisioning, renewal, monitoring and operational management.
• Strong infrastructure engineering capability, with experience designing and supporting the underlying platforms required to deliver highly available and resilient PKI services.
• Demonstrated ability to troubleshoot complex PKI, certificate, authentication and cryptographic issues and provide authoritative technical guidance across infrastructure and application teams.
• Experience developing security policies, Certificate Practice Statements, architectural documentation and operational procedures aligned with security, compliance and audit requirements.
• Strong stakeholder engagement skills, with the ability to communicate complex security concepts clearly and work effectively across cybersecurity, architecture, infrastructure, application and program delivery teams.
• Relevant postgraduate qualifications and extensive professional experience, or an equivalent combination of relevant education, training and enterprise technology experience.

What’s in it for You:

• Initial 12-month contract with potential for extension.
• Clayton, Melbourne location with hybrid working – 3 days on-site and 2 days WFH per week.
• Senior technical role with genuine ownership across the design and delivery of a significant enterprise PKI program.
• Opportunity to shape certificate management, cryptographic architecture, automation and security practices across a large, complex technology environment.
• Work closely with experienced cybersecurity, infrastructure and architecture professionals on a strategically important security capability.

Apply today and Jimmy Nguyen will reach out to disclose further information.