Note: The job is a remote job and is open to candidates in USA. Endava is a technology company that has been harnessing technology to drive meaningful change for over two decades. They are seeking a Senior Identity & Encryption Engineer with expertise in Public Key Infrastructure (PKI) to lead the design and implementation of enterprise cryptographic services, providing technical leadership and establishing scalable solutions for clients.

Responsibilities

• Lead the design, modernization, and optimization of enterprise PKI and certificate management platforms
• Provide technical leadership for certificate lifecycle management, secrets management, and cryptographic services across hybrid and cloud environments
• Design and implement automated, scalable certificate provisioning and renewal processes using modern engineering practices
• Develop self-service capabilities that enable development and infrastructure teams to securely request and provision certificates with minimal manual intervention
• Design and implement API-driven integrations that enable CI/CD pipelines and DevOps platforms to securely interact with enterprise secrets management solutions
• Maximize the value of existing security platforms by standardizing enterprise workflows, eliminating siloed solutions, and driving adoption of centralized services
• Define engineering standards, best practices, and architectural patterns for PKI, certificate management, and secrets management
• Serve as the senior technical escalation point for complex cryptographic platform issues and mentor engineering teams on automation and operational excellence
• Contribute to platform hardening through secure configuration, delegation models, monitoring, patch management, and continuous optimization
• Develop engineering roadmaps and implementation strategies aligned with client business objectives and evolving security requirements
• Partner with cross-functional engineering, infrastructure, DevOps, security, and application teams to deliver scalable enterprise identity and encryption solutions
• Evaluate emerging technologies and industry trends to ensure long-term platform sustainability and future readiness

Skills

• 7–10+ years of experience designing, implementing, and managing enterprise PKI, certificate lifecycle management, or cryptographic platforms
• Deep expertise in PKI architecture, certificate management strategies, cryptographic services, and enterprise security best practices
• 5+ years of engineering experience building automation solutions within Identity, Directory Services, or DevOps environments
• Strong PowerShell scripting and automation experience
• Experience designing and supporting Infrastructure as Code (IaC) and CI/CD pipelines
• Experience integrating enterprise platforms through REST APIs and automation frameworks
• Hands-on experience deploying, managing, and troubleshooting Hardware Security Modules (HSMs)
• Experience with cloud platforms including Azure, AWS, or Google Cloud, with strong knowledge of Azure Key Vault or equivalent cloud secrets management services
• Demonstrated experience collaborating with cross-functional technical teams to deliver enterprise infrastructure and security solutions
• Strong understanding of incident, problem, request, and change management processes
• Excellent communication skills with the ability to engage technical teams, architects, project managers, and business stakeholders
• Experience administering and engineering Keyfactor Certificate Management Platform
• Experience with HashiCorp Vault and CyberArk
• Experience integrating enterprise secrets management platforms into DevOps and CI/CD workflows
• Knowledge of modern zero-touch certificate lifecycle management and certificate-as-a-service architectures
• Experience developing self-service platforms for identity, certificate, or secrets management
• Consulting experience delivering enterprise security transformation initiatives across multiple clients or industries

Benefits

• Competitive salary package
• Share plan
• Company performance bonuses
• Value-based recognition awards
• Referral bonus
• Career coaching
• Global career opportunities
• Non-linear career paths
• Internal development programmes for management and technical leadership
• Complex projects
• Rotations
• Internal tech communities
• Training
• Certifications
• Coaching
• Online learning platforms subscriptions
• Pass-it-on sessions
• Workshops
• Conferences
• Hybrid work and flexible working hours
• Employee assistance programme
• Global internal wellbeing programme
• Access to wellbeing apps
• Global internal tech communities
• Hobby clubs and interest groups
• Inclusion and diversity programmes
• Events and celebrations
• Robust healthcare and benefits including Medical, Dental, vision, Disability coverage, and various other benefit options
• Flexible Spending Accounts (Medical, Transit, and Dependent Care)
• Employer Paid Life Insurance and AD&D Coverages
• Health Savings account paired with our low-cost High Deductible Medical Plan
• 401(k) Safe Harbor Retirement plan with employer match with immediately vest

Company Overview

Company H1B Sponsorship