Cryptography Lead SME / Senior AgileSec Analytics Platform Engineer Lead

Role summary:
Lead onboarding, deployment, integration, and operationalization of the AgileSec Analytics platform and enterprise PKI/certificate lifecycle solutions. Own platform architecture, deployment standards, configuration management, upgrades, monitoring, and incident resolution. Provide technical leadership across security, infrastructure and engineering teams to deliver secure, automated, scalable certificate management and analytics.

Key responsibilities

Lead architecture, deployment, configuration, hardening, upgrades and operational readiness for AgileSec Analytics and related platform services.
Design, implement and operate enterprise PKI and certificate lifecycle management (Keyfactor or equivalent): issuance, renewal, revocation, rotation, trust stores and PKI operations.
Implement and optimize certificate & asset discovery (e.g., Cipher Insights) to identify unknown certificates, machine identities and security risks.
Troubleshoot TLS/SSL issues: handshake failures, chain/trust problems, OCSP/CRL, expirations and outages; lead remediation.
Build and maintain integrations (REST APIs, webhooks) and secure credential handling between AgileSec/Keyfactor and enterprise systems.
Automate certificate workflows and Security-as-Code across CI/CD pipelines (Azure DevOps, GitHub Actions, Jenkins) and IaC (Terraform, Ansible, Helm).
Administer Linux environments and support Kubernetes platform services (deployments, upgrades, performance tuning, troubleshooting).
Develop and maintain monitoring, analytics and operational dashboards in OpenSearch / ELK / Splunk; configure alerts, reports and health metrics.
Integrate platform and PKI with cloud and infrastructure components (AWS, Azure, F5, NGINX, IIS, Kubernetes).
Create and maintain technical documentation, runbooks, SOPs and administrator guides.
Provide technical leadership, mentor junior/mid-level engineers, coordinate cross-functional stakeholders and drive knowledge transfer.

Primary skills (required)

PKI & certificate lifecycle management: Keyfactor (or equivalent), TLS/SSL, cryptography, trust stores, OCSP/CRL.
AgileSec Analytics platform engineering & integrations.
Linux administration, Kubernetes, containerized platform operations.
Security automation: CI/CD pipeline integration, Terraform, Ansible, Helm.
REST API integration and secure credential management.

Secondary skills (desired)

Monitoring & analytics: OpenSearch, ELK, Splunk.
Cloud & infrastructure: AWS, Azure, F5, NGINX, IIS.
Scripting/programming: Python, PowerShell, Bash.
Troubleshooting, stakeholder management, technical leadership and documentation.

Qualifications

Strong relevant experience implementing/managing PKI, certificate automation and security platforms in large enterprises.
Demonstrated experience with Keyfactor (or equivalent), AgileSec, Kubernetes, Linux and CI/CD/IaC tooling.
Strong experience diagnosing TLS/SSL, PKI and certificate chain/trust issues in production.
Experience building integrations via REST APIs/webhooks and automating workflows.
Excellent communication, cross-functional collaboration and leadership skills.

Certifications (preferred)

CISSP, CISM, CCSP, RHEL, or relevant cloud/security certifications.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the Tech Aalto Privacy Policy, a copy of which is published at Tech Aalto’s website (https://www.techaalto.com/privacy/)
Confidentiality is assured, and only shortlisted candidates will be notified for interviews.