PKI Certificate Management - Security Identity Engineer

About the role

The Security PKI Engineer will be responsible for engineering, operating, and continuously improving LSEG’s Public Key Infrastructure (PKI) and Certificate Lifecycle Management (CLM) capabilities. This role ensures trusted identity, authentication, and encryption services are reliable, scalable, and secure across enterprise and cloud environments.

What you'll do

• Engineer, administer, and maintain PKI components including Root, Intermediate, and Issuing Certificate Authorities
• Operating and supporting certificate validation and distribution services including CRLs, OCSP, AIA, and CDP
• Executing end-to-end certificate lifecycle processes: request validation, issuance, renewal, revocation, and retirement
• Ensuring essential PKI and CLM processes meet high-quality standards through strong operational controls, documentation, and repeatable runbooks
• Maintaining certificate inventory hygiene and reduce operational risk by proactively addressing expirations and crypto compliance gaps

What you need

• 7–13 yrs of experience
• Incident response
• IAM
• Cloud security
• Python
• Firewalls
• AWS
• B.Sc or B.Tech or B.E. or BCA or Class 12 or Chartered Accountant

Good to have

• GCP
• Azure
• Active Directory
• TCP/IP
• PowerShell
• Bash