Security Architect – PKI & Crypto Inventory L2

We are HCLTech, one of the fastest-growing large tech companies in the world and home to 225,000+ people across 60 countries, supercharging progress through industry‑leading capabilities centered around Digital, Engineering and Cloud. The driving force behind that work, our people, are diverse, creative, and passionate, raising the bar for excellence on a regular basis. We, in turn, work hard to bring out the best in them as we strive to help them find their spark and become the best version of themselves that they can be. If all this sounds like an environment you’ll thrive in, then you’re in the right place. Join us on our journey in advancing the technological world through innovation and creativity.

We are looking for an experienced Security Architect – PKI & Crypto Inventory L2 to join our cybersecurity team in Frankfurt. In this role, you will be responsible for designing, implementing, and supporting enterprise PKI and cryptographic inventory solutions, ensuring secure management of certificates, keys, and cryptographic assets across complex environments.

Key Responsibilities

• Design and implement secure PKI and cryptographic inventory solutions aligned with business and security requirements
• Manage digital certificate and cryptographic key lifecycles, including issuance, renewal, revocation, and inventory tracking
• Provide Level 2 support for PKI and crypto‑related incidents, troubleshooting, and root cause analysis
• Collaborate with infrastructure, application, and security teams to integrate PKI services across enterprise platforms
• Support risk assessments, audits, and compliance activities related to cryptographic controls
• Develop and maintain architecture documentation, standards, and operational procedures

Required Skills & Experience

• 5+ years of experience in PKI, Cryptography, Security Architecture, or Cyber Security
• Hands‑on experience with enterprise PKI platforms such as Microsoft CA, DigiCert, Entrust, Venafi, Keyfactor, or similar
• Strong knowledge of certificate lifecycle management, cryptographic protocols, HSMs, and key management solutions
• Experience with cryptographic inventory, certificate discovery, and compliance‑related processes
• Knowledge of security standards and frameworks such as ISO 27001, GDPR, or PCI DSS
• Scripting and automation experience using PowerShell, Python, or similar technologies

Preferred Skills

• CISSP, CISM, or other relevant security certifications
• Experience in large enterprise or financial services environments
• Knowledge of cloud security and cloud‑based PKI solutions
• Experience working in global and cross‑functional teams

Equal Opportunity Statement

We promote equal opportunities for all employees, regardless of their cultural and social background, gender, disability, age, religion, beliefs, and sexual identity. We give priority consideration to severely disabled applicants and those of equal status in the case of equal suitability.

Data Privacy Notice

HCLTech is committed to protecting and securing the privacy and confidentiality of the Personal Data which it collects directly or indirectly from you when applying for a job at HCLTech either directly or through a third‑party human resources agency. This notice (the “Notice”) outlines and explains how HCL Technologies Limited including its subsidiaries, local employing entities, associates, and affiliated companies (collectively referred to as “HCLTech”, “us”, “our”, or “we”) will process your Personal Data in accordance with applicable privacy legislation(s).

Candidate Data Privacy Notice | HCLTech Germany