PKI Certificate Management - Security Identity Engineer

Job description

Role Summary The Security PKI Engineer will be responsible for engineering, operating, and continuously improving LSEG’s Public Key Infrastructure (PKI) and Certificate Lifecycle Management (CLM) capabilities. This role ensures trusted identity, authentication, and encryption services are reliable, scalable, and secure across enterprise and cloud environments. You will contribute to designs and production improvements that increase availability, performance, and operational efficiency, partnering closely with architects, security teams, infrastructure, and application owners to deliver measurable outcomes on agreed priorities and timelines. Key Responsibilities: · Engineer, administer, and maintain PKI components including Root, Intermediate, and Issuing Certificate Authorities. · Operating and supporting certificate validation and distribution services including CRLs, OCSP, AIA, and CDP. · Executing end-to-end certificate lifecycle processes: request validation, issuance, renewal, revocation, and retirement. · Ensuring essential PKI and CLM processes meet high-quality standards through strong operational controls, documentation, and repeatable runbooks. · Maintaining certificate i...