CrawlJobs Logo

Pki Engineer

https://www.citi.com/ Logo

Citi

Location Icon

Location:
United Kingdom , Belfast

Category Icon
Category:
IT - Software Development

Job Type Icon

Contract Type:
Not provided

Salary Icon

Salary:

Not provided
Save Job
Save Icon
Apply Position

Job Description:

Engineer the future of global finance. At Citi, our Tech team doesn’t just support finance – we are helping to redefine it. Every day, $5 trillion crosses through our network. We do business in 180+ countries operating at a scale few can match. From deploying advanced AI to helping shape global markets, we build systems that matter. Look to join a team where your work helps influence economies, your ideas can drive innovation and outcomes, and your growth is backed by mentorship, continuous learning and flexibility with potential hybrid work opportunities. Help solve real-world challenges that touch millions and get the opportunity to build the future of finance with Citi Tech.

Job Responsibility:

  • Research cryptographic protocols, develop crypto solutions at the enterprise level, which will include working on PKI architectures with main focus on certificate management automation
  • Work with all disciplines, engineers, and operational product owners to integrate PKI and certificate management related technologies with Citi platforms to protect and manage the cryptography of mission critical systems
  • Perform product evaluation, testing and certification of PKI and Crypto technologies
  • Ensure that all security products meet or exceed Citi internal and regulatory requirements
  • Provide occasional 4th level support for the product toolset
  • Produce documentation of processes and procedures for the usage of the product
  • Follow the Technology Development Life Cycle in the development of all security tools

Requirements:

  • Senior level experience in cryptography
  • Experience with commercial Ca products and/or certificate management systems is a plus
  • Working with Trust Providers is a plus
  • Understanding of Microsoft Windows operating systems
  • Understanding of Linux
  • Understanding of cryptographic protocols
  • Programming Experience in JAVA or C
  • Programming in Python
  • Knowledge of Crypto Libraries (Bouncy Castle)
  • Sound security engineering principles as background to understanding the inner workings of the systems and controls that form an enterprise security ecosystem
  • Symmetric Key Encryption
  • Asymmetric Encryption
  • Bachelor’s degree/University degree or equivalent

Nice to have:

  • Experience with commercial Ca products and/or certificate management systems is a plus
  • Working with Trust Providers is a plus
What we offer:
  • 27 days annual leave (plus bank holidays)
  • A discretional annual performance related bonus
  • Private Medical Care & Life Insurance
  • Employee Assistance Program
  • Pension Plan
  • Paid Parental Leave
  • Special discounts for employees, family, and friends
  • Access to an array of learning and development resources

Additional Information:

Job Posted:
May 03, 2026

Employment Type:
Fulltime
Work Type:
Hybrid work
Icon
Citi - All Job Offers
Job Link Share:
Copy Link Icon
Facebook Icon Twitter Icon LinkedIn Icon

Looking for more opportunities? Search for other job offers that match your skills and interests.

Briefcase Icon

Similar Jobs for Pki Engineer

PKI Engineering Group Manager

Within Citi, the PKI Engineering Team is focusing on cryptographic protocols, ma...
Location
Location
Hungary , Budapest
Salary
Salary:
Not provided
https://www.citi.com/ Logo
Citi
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 10+ years experience in cryptography, PKI, and strong understanding of cryptography and mathematical algorithms
  • Understanding the principles related to PKI, private keys, encryption methods, CRL, advanced key usages and post quantum cryptography
  • Deep Understanding of Microsoft Windows and Linux operating systems and cryptographic protocols
  • Knowledge of Crypto Libraries (bouncy castle)
  • Symmetric Key Encryption and Asymmetric Encryption
  • Experience with a variety of HSM platforms, Certificate Authority systems and Cloud Providers
  • Working with Trust Providers is a plus
  • Comprehensive knowledge of design metrics, analytics tools, benchmarking activities and related reporting to identify best practices
  • Demonstrated analytic/diagnostic skills
  • Ability to work in a matrix environment and partner with virtual teams
Job Responsibility
Job Responsibility
  • Manage a team of Public key Infrastructure(PKI) engineers, supporting certificate solutions for internal and external stakeholders, drive projects within the group and creating a technology domain roadmap
  • Ensure that all integration of functions meet business goals
  • Define necessary system enhancements to deploy new products and process enhancements
  • Recommend suitable products or product customization for system integration
  • Identify problem causality, business impact and root causes
  • Create PKI solutions for a large company
  • Improve engineering capabilities for timely delivery of projects
  • Collaborate with partners in Engineering, Operations and Business
  • Perform product evaluation, testing and certification of PKI and Crypto technologies. Ensure that all security products meet or exceed Citi internal and regulatory requirements
  • Provide occasional 4th level engineering support for the product toolset
What we offer
What we offer
  • Cafeteria Program
  • Home Office Allowance (for colleagues working in hybrid work models)
  • Paid Parental Leave Program (maternity and paternity leave)
  • Private Medical Care Program and onsite medical rooms at our offices
  • Pension Plan Contribution to voluntary pension fund
  • Group Life Insurance
  • Employee Assistance Program
  • Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed
  • Flexible work arrangements to support you in managing work - life balance
  • Career progression opportunities across geographies and business lines
  • Fulltime
Read More
Arrow Right

Systems Engineer

Dig in with your teams to effectively perform requirements analysis, refinement,...
Location
Location
United States , Annapolis Junction
Salary
Salary:
136000.00 - 250000.00 USD / Year
lufburrow.com Logo
LufCo
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelors degree in a Technical or related discipline is required
  • 5 years of additional experience may be substituted for a bachelors degree
  • 7 years of experience in Systems Engineering in programs and contracts of similar scope, type, and complexity
  • Experience with Atlassian suite of products
  • Strong communication
  • Ability to manage customer and development team expectations
  • Proven ability to problem solve with sometimes limited resources
  • Exposure to Agile methodologies
  • Active TS/SCI with Polygraph clearance
Job Responsibility
Job Responsibility
  • Drive next generation PKI architecture forward utilizing commercial and government best practices for ensuring secure key solutions
  • Planning, implementation, and evolution of PKI solution sets for evaluation and analysis as part of existing system modernization efforts
  • Ability to see impacts of system changes at scale, minimizing technical debt and critical thinking related to strategic moves regarding Identity, Credentialing, and Access Management Solutions
  • Provide fundamental knowledge on applying technologies like containerization to legacy physical workloads, the ability to identify automation improvements, and the ability to communicate pros/cons as part of the technical decision making process
  • Documenting, maintaining and representing stakeholder priorities in regards to Certificate products and services impacting thousands of users and systems worldwide
  • Advocate for automation in all aspects of the system (build, deployment, test, updating, and monitoring)
What we offer
What we offer
  • Paid Time Off
  • 401K Contribution and Employer Match Contributions
  • Medical, Dental, and Vision Coverage
  • Tuition reimbursement
  • Fulltime
Read More
Arrow Right

Product Security Engineer

As a Product Security Engineer specializing in cryptography and PKI, you will de...
Location
Location
United States , Palo Alto
Salary
Salary:
Not provided
1x.tech Logo
1X Technologies
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Strong experience with cryptography, PKI design, and key management
  • Experience working with hardware security modules (HSMs), including vendor selection, integration, and root‑of‑trust establishment
  • Familiarity with remote device attestation frameworks (such as fTPM, OP‑TEE, or similar)
  • Demonstrated ability to design and scale secure firmware signing and code signing pipelines
  • Proven track record in defining and enforcing trust policies (key generation, rotation, destruction) and provisioning mechanisms
  • Experience securing build/artifact pipelines and developing secure communication protocols
  • Ability to work cross‑functionally with hardware, software, security operations, and infrastructure teams
  • High attention to detail, strong problem solving, with a mindset of anticipating vulnerabilities and designing defendable systems
Job Responsibility
Job Responsibility
  • Design and manage end‑to‑end cryptographic services, including public key infrastructure (PKI) and key lifecycle management
  • Establish HSM infrastructure as the root‑of‑trust for firmware signing and IoT endpoint authentication
  • Lead evaluation, procurement, installation, configuration, and integration of HSM vendor solutions
  • Architect key management systems that scale from hundreds of devices today to millions over time
  • Design remote device attestation mechanisms (e.g. fTPM, OP‑TEE, or equivalent) tied to the HSM root‑of‑trust
  • Build and automate secure firmware/bootloader signing pipelines
  • Define trust infrastructure and policies for author key generation, provisioning, rotation, and destruction
  • Secure build/artifact pipelines and code‑signing workflows
  • Develop factory provisioning architecture for mass key/certificate distribution
  • Support the development of secure communication protocols
  • Fulltime
Read More
Arrow Right

Senior Security Operations Engineer II

As a Senior Security Operations Engineer, you’ll play a key role in ensuring the...
Location
Location
United States , Scottsdale
Salary
Salary:
Not provided
axon.com Logo
Axon
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 7+ years of experience in operations, site reliability, or infrastructure engineering roles
  • Strong experience securing and managing cloud environments (e.g., AWS, Azure) and containerized workloads
  • Deep understanding of Linux systems, networking, distributed systems, and their associated security controls
  • Proficiency in automation, scripting, and security tooling integration to streamline operations and enforcement
  • Experience with security monitoring, alerting, SIEM platforms, and observability tools
  • Solid grasp of CI/CD practices with integrated security testing and compliance checks
  • Experience managing Kubernetes clusters and running containerized workloads in production
  • Experience with deploying and administrating any of the following: scalable cloud native secrets solutions such as AWS KMS, Azure KeyVault
  • PKI solutions such as EJBCA, Smallstep, Venafi
  • or vaulting solutions such as Hashicorp Vault
Job Responsibility
Job Responsibility
  • Implementing and improving automated security checks in CI/CD pipelines to prevent vulnerabilities from reaching production
  • Writing, reviewing, and maintaining security-focused infrastructure-as-code for scalable and compliant deployments
  • Investigating security incidents, performing root cause analysis, and implementing long-term mitigation strategies
  • Collaborating with developers to develop new features, services, and infrastructure requirements
  • Enhancing security observability through improved log collection, metrics, and alerting configurations
  • Maintaining and improving security runbooks, incident response playbooks, and internal security tooling for operational efficiency
  • Resolve security/infrastructure incidents by participating in high impact/high visibility incidents as a participant and ideally as an incident commander
  • Maintain and secure critical infrastructure components such as PKI (Public Key Infrastructure) and IAM ( Identity & Access Management) systems, ensuring reliability, scalability, and compliance with organizational and industry security standards
  • Build and maintain secure, reliable, and scalable infrastructure that protects core services and sensitive data
  • Troubleshoot and resolve complex operational and system-level issues across environments
What we offer
What we offer
  • Competitive salary and 401k with employer match
  • Discretionary paid time off
  • Paid parental leave for all
  • Medical, Dental, Vision plans
  • Fitness Programs
  • Emotional & Mental Wellness support
  • Learning & Development programs
  • Snacks in our offices
  • Fulltime
Read More
Arrow Right

PKI Engineer

The purpose of this role is to design, develop and engineer Cryptographic, PKI a...
Location
Location
Hungary , Budapest
Salary
Salary:
12211560.00 - 20474640.00 HUF / Month
https://www.citi.com/ Logo
Citi
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 5-8 years of relevant experience in an Engineering role
  • Strong solid experience in cryptography, crypto protocols/algorithms and peripheral technologies
  • Must be familiar with information security concepts, best practices and solutions
  • Must have a strong engineer background
  • Database knowledge, preferably MSSQL and scripting background, preferably Powershell
  • Must have experience with PKI and a good understanding of cryptography, including the principles related to PKI, private keys, encryption methods, CRL, and advanced key usages
  • Understanding of Microsoft Windows and Unix operating systems
  • Sound security engineering principles as background to understanding the inner workings of the systems and controls that form an enterprise security ecosystem
  • Understanding of symmetric key encryption and asymmetric encryption
  • Bachelor’s degree/University degree or equivalent experience
Job Responsibility
Job Responsibility
  • Design and introduce enterprise level certificate automation processes and solutions, which will include working on PKI architectures
  • Work with all disciplines, engineers, and operational product owners to integrate PKI and certificate management related technologies with Citi platforms to protect and manage the cryptography of mission critical systems
  • Perform product evaluation, testing and certification of PKI and Crypto technologies
  • Ensure that all security products meet or exceed Citi internal and regulatory requirements
  • Provide occasional 4th level support for the product toolset
  • Produce documentation of processes and procedures for the usage of the product
  • Follow the Technology Development Life Cycle in the development of all security tools
What we offer
What we offer
  • Cafeteria Program
  • Home Office Allowance (for colleagues working in hybrid work models)
  • Paid Parental Leave Program (maternity and paternity leave)
  • Private Medical Care Program and onsite medical rooms at our offices
  • Pension Plan Contribution to voluntary pension fund
  • Group Life Insurance
  • Employee Assistance Program
  • Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed
  • Flexible work arrangements to support you in managing work - life balance
  • Career progression opportunities across geographies and business lines
  • Fulltime
Read More
Arrow Right

Senior Security Operations Engineer II

As a Senior Security Operations Engineer, you’ll play a key role in ensuring the...
Location
Location
United States , Scottsdale
Salary
Salary:
Not provided
axon.com Logo
Axon
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 7+ years of experience in operations, site reliability, or infrastructure engineering roles
  • Strong experience securing and managing cloud environments (e.g., AWS, Azure) and containerized workloads
  • Deep understanding of Linux systems, networking, distributed systems, and their associated security controls
  • Proficiency in automation, scripting, and security tooling integration to streamline operations and enforcement
  • Experience with security monitoring, alerting, SIEM platforms, and observability tools
  • Solid grasp of CI/CD practices with integrated security testing and compliance checks
  • Experience managing Kubernetes clusters and running containerized workloads in production
  • Experience with deploying and administrating any of the following: scalable cloud native secrets solutions such as AWS KMS, Azure KeyVault
  • PKI solutions such as EJBCA, Smallstep, Venafi
  • or vaulting solutions such as Hashicorp Vault
Job Responsibility
Job Responsibility
  • Implementing and improving automated security checks in CI/CD pipelines to prevent vulnerabilities from reaching production
  • Writing, reviewing, and maintaining security-focused infrastructure-as-code for scalable and compliant deployments
  • Investigating security incidents, performing root cause analysis, and implementing long-term mitigation strategies
  • Collaborating with developers to develop new features, services, and infrastructure requirements
  • Enhancing security observability through improved log collection, metrics, and alerting configurations
  • Maintaining and improving security runbooks, incident response playbooks, and internal security tooling for operational efficiency
  • Resolve security/infrastructure incidents by participating in high impact/high visibility incidents as a participant and ideally as an incident commander
  • Maintain and secure critical infrastructure components such as PKI (Public Key Infrastructure) and IAM ( Identity & Access Management) systems, ensuring reliability, scalability, and compliance with organizational and industry security standards
  • Build and maintain secure, reliable, and scalable infrastructure that protects core services and sensitive data
  • Troubleshoot and resolve complex operational and system-level issues across environments
What we offer
What we offer
  • Competitive salary and 401k with employer match
  • Discretionary paid time off
  • Paid parental leave for all
  • Medical, Dental, Vision plans
  • Fitness Programs
  • Emotional & Mental Wellness support
  • Learning & Development programs
  • Snacks in our offices
  • Fulltime
Read More
Arrow Right

Technical Lead, Host Assurance

OpenAI is seeking a Technical Lead, Host Assurance to own and scale the trust fo...
Location
Location
United States , San Francisco; Seattle
Salary
Salary:
347000.00 - 385000.00 USD / Year
openai.com Logo
OpenAI
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Have built and scaled deeply technical security or infrastructure teams in prior roles, with direct people-management responsibility
  • Have led senior engineers and earned credibility through hands-on technical leadership
  • Have deep experience with PKI, HSMs, machine identity, host attestation, secure boot, or hardware-rooted trust
  • Have built and operated security-critical infrastructure that sits on the critical path for large-scale production systems
  • Are comfortable owning low-level, high-impact systems where correctness, reliability, and scale matter deeply
  • Balance rigor with pragmatism, enabling teams to move quickly without compromising foundational trust
  • Earn trust through delivery — building, operating, and improving systems yourself when it matters most
  • Are energized by ambiguous problems, rapid growth, and building infrastructure that shapes the future
Job Responsibility
Job Responsibility
  • Own host assurance outcomes by defining and evolving the baseline security properties required for bare-metal hosts to be eligible for production use
  • Ensure hosts are verifiably trustworthy from delivery and installation through secure bootstrap and readiness to join orchestration systems
  • Design, implement, and operate the Host Assurance platform, including: HSM-backed services and key-management infrastructure, PKI and certificate-issuance systems that eliminate static credentials, and host identity, attestation, and measurement tooling
  • Validate delivered hardware and firmware against vendor claims and continuously detect and manage drift over time
  • Eliminate insecure bootstrap patterns while preserving deployment throughput and operational reliability
  • Partner with provisioning, fleet, and orchestration teams to deliver paved paths where the secure approach is the easiest approach
  • Set and uphold a high bar for reliability, resilience, and operational hygiene across foundational trust services
  • Lead incident response and post-incident learning when issues arise, driving systemic improvements that keep these systems dependable at scale
  • Lead, mentor, and directly manage a small team of senior engineers across PKI, operating systems, hardware security, and platform engineering
  • Hire and scale the Host Assurance function deliberately and proportionately as OpenAI’s compute footprint and platform ambitions grow
What we offer
What we offer
  • Medical, dental, and vision insurance for you and your family, with employer contributions to Health Savings Accounts
  • Pre-tax accounts for Health FSA, Dependent Care FSA, and commuter expenses (parking and transit)
  • 401(k) retirement plan with employer match
  • Paid parental leave (up to 24 weeks for birth parents and 20 weeks for non-birthing parents), plus paid medical and caregiver leave (up to 8 weeks)
  • Paid time off: flexible PTO for exempt employees and up to 15 days annually for non-exempt employees
  • 13+ paid company holidays, and multiple paid coordinated company office closures throughout the year for focus and recharge, plus paid sick or safe time (1 hour per 30 hours worked, or more, as required by applicable state or local law)
  • Mental health and wellness support
  • Employer-paid basic life and disability coverage
  • Annual learning and development stipend to fuel your professional growth
  • Daily meals in our offices, and meal delivery credits as eligible
  • Fulltime
Read More
Arrow Right

PKI Operation Sr. Engineer

Location
Location
Egypt , Nasr City
Salary
Salary:
Not provided
el-delta.com Logo
El Delta Electronic Systems
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Proven experience in managing and operating PKI infrastructures (eMudhra, Entrust, etc.)
  • Hands-on experience with HSMs and Hardware Tokens (e.g., Thales, epass)
  • Strong understanding of X.509 certificates, certificate lifecycle, key management, and revocation mechanisms
  • Familiarity with cryptographic standards and protocols (OCSP, CRL, TSA, ... etc)
  • Experience in scripting and automation (PowerShell, Bash, Python, etc.)
  • Solid understanding of Linux environments
  • Strong troubleshooting and analytical skills
  • Excellent documentation and communication skills
Job Responsibility
Job Responsibility
  • Operate and support enterprise PKI and Certificate Issuance systems
  • Manage and troubleshoot issues related to CA servers, RA components, OCSP responders, CRLs, and associated services
  • Perform secure operations and lifecycle management on HSMs (e.g., key generation, backup, rotation, decommissioning)
  • Monitor system health, audit logs, and certificate expiration alerts
  • Perform root and subordinate CA certificate management (issuance, renewal, and revocation)
  • Provide technical support for internal teams and end-users regarding certificate usage and enrollment
  • Coordinate with Information Security and Infrastructure teams to ensure compliance with internal and external policies
  • Document configurations, procedures, incident handling, and system changes
  • Participate in periodic audits, key ceremonies, and disaster recovery drills
  • Maintain knowledge of industry best practices and emerging threats in PKI and cryptographic systems
  • Fulltime
Read More
Arrow Right