PKI Certificate Management - Security Identity Engineer

Role Summary The Security PKI Engineer will be responsible for engineering, operating, and continuously improving LSEG’s Public Key Infrastructure (PKI) and Certificate Lifecycle Management (CLM) capabilities. This role ensures trusted identity, authentication, and encryption services are reliable, scalable, and secure across enterprise and cloud environments. You will contribute to designs and production improvements that increase availability, performance, and operational efficiency, partnering closely with architects, security teams, infrastructure, and application owners to deliver measurable outcomes on agreed priorities and timelines. Key Responsibilities · Engineer, administer, and maintain PKI components including Root, Intermediate, and Issuing Certificate Authorities. · Operating and supporting certificate validation and distribution services including CRLs, OCSP, AIA, and CDP. · Executing end-to-end certificate lifecycle processes: request validation, issuance, renewal, revocation, and retirement. · Ensuring essential PKI and CLM processes meet high-quality standards through strong operational controls, documentation, and repeatable runbooks. · Maintaining certificate inventory hygiene and reduce operational risk by proactively addressing expirations and crypto compliance gaps. · Driving project priorities, deadlines, and outcomes for PKI and CLM engineering deliverables. · Applying deep knowledge of site reliability, software engineering, tooling, frameworks, infrastructure, and systems to deliver each task effectively. · Contributing to designs of software components, systems, and features that improve availability, scalability, latency, and efficiency of LSEG services. · Participating in sustainable incident response and production improvements, including root cause analysis and preventive remediation. · Building automation to prevent problem recurrence and implementing automated responses for non-exceptional service conditions. · Writing and reviewing optimized and accurate automation code and scripts to improve certificate operations and reliability. · Providing feedback and suggested improvements through peer code reviews, focusing on quality, performance, and maintainability. · Improving monitoring and alerting for certificate expiry, CA health, OCSP and CRL availability, and CLM workflow performance. · Supporting integration of CLM workflows with enterprise tooling and APIs to reduce manual effort and improve governance. · Partnering with architects to decompose solutions for technology systems and products, aligning PKI and CLM designs to platform standards. · Acting as a point of contact within the PKI domain by demonstrating strong depth of knowledge and building awareness of adjacent domains to manage dependencies. · Proactively building and applying relevant domain knowledge related to workflows, data pipelines, business policies, configurations, and constraints.