Identity & Security Engineer

Introduction to Role

Are you ready to safeguard the digital trust that lets breakthrough science move at speed? Can you turn complex certificate ecosystems into reliable, automated services that keep critical platforms secure and available?

This role puts you at the heart of our security posture, where your expertise in PKI and certificate management ensures every connection, transaction and workload is authenticated, encrypted and trusted.

You will join a modern technology organisation scaling data and digital capabilities across the enterprise. Here, you will strengthen foundational identity and security services that underpin research, development and operations worldwide. Expect to work hands-on, solve high-impact problems and continuously improve how we operate — using the right tools, automation and emerging techniques to increase resilience and reduce risk.

Accountabilities

• PKI Operations: Administer and support enterprise PKI platforms to deliver reliable internal certificate services and trust components that minimise downtime and enable secure business operations.

• Certificate Lifecycle Management: Own issuance, renewal, revocation, replacement and expiry tracking to prevent service interruptions and maintain strong trust chains across platforms and applications.

• CA Administration: Operate and maintain Certificate Authorities and associated registration or approval workflows, ensuring controls are followed and auditability is maintained.

• Key Management Support: Execute approved procedures for cryptographic key generation, storage, backup, rotation, recovery and retirement to protect key material and reduce exposure.

• Incident Resolution: Investigate and resolve certificate-related incidents such as trust chain failures, expired certificates, revocation issues and TLS/SSL errors — restoring service quickly and preventing recurrence.

• Monitoring and Maintenance: Track platform health, availability and performance; implement proactive actions that reduce operational risk and improve reliability.

• Change Implementation: Deliver approved changes, upgrades, renewals, patching and maintenance in line with change control, ensuring secure and predictable outcomes.

• Documentation and Audit Readiness: Maintain runbooks, procedures and configuration records to support continuity, handovers and compliance reviews.

• Stakeholder Collaboration: Partner with infrastructure, cybersecurity, application, cloud and support teams to design, implement and support certificate-based solutions that enable secure delivery at scale.

• Continuous Improvement: Identify and implement opportunities that increase automation, standardisation, resilience and efficiency across PKI and certificate processes; adopt modern tools and appropriate AI-driven approaches to accelerate quality and speed within guardrails.

• Governance and Decision-Making: Operate within established standards, policies and architectural guardrails; handle routine and moderately complex issues independently, escalating higher-risk matters appropriately.

Essential Skills & Experience

• PKI Knowledge: Experience supporting PKI or certificate management services in an enterprise environment.
• Certificate Management: Understanding of digital certificates, certificate authorities, certificate chains, issuance, renewal, revocation and expiry management.
• Security Fundamentals: Knowledge of TLS/SSL, encryption, authentication and certificate trust concepts.
• Revocation Services: Familiarity with CRL and OCSP processes and related troubleshooting.
• Technical Troubleshooting: Ability to diagnose and resolve certificate-related issues across servers, applications and enterprise services.
• Infrastructure Knowledge: Good understanding of Windows Server and enterprise infrastructure environments.
• Process Discipline: Experience working within incident, problem and change management frameworks.
• Documentation Skills: Ability to create and maintain clear technical and operational documentation.
• Communication: Ability to communicate effectively with both technical and non-technical stakeholders.

Desirable Skills & Experience

• Microsoft PKI: Experience with Microsoft Active Directory Certificate Services (AD CS).
• Hardware Security: Familiarity with Hardware Security Modules (HSMs).
• Automation: Experience with PowerShell or similar scripting tools for certificate and PKI automation.
• Identity Integration: Exposure to Active Directory, Microsoft Entra ID or hybrid identity environments.
• Cloud Exposure: Familiarity with cloud-based certificate services or hybrid infrastructure environments.
• Regulated Environments: Knowledge of audit, security controls and compliance expectations in enterprise or regulated settings.
• Education: Degree in Information Technology, Computer Science, Cybersecurity, Engineering or a related discipline — or equivalent relevant experience.
• Certifications: Relevant technical or security certifications are advantageous.

Working Arrangements

When we put unexpected teams in the same room, we unleash bold thinking with the power to inspire life-changing medicines. In-person working gives us the platform we need to connect, work at pace and challenge perceptions. That's why we work, on average, a minimum of three days per week from the office. But that doesn't mean we're not flexible — we balance the expectation of being in the office while respecting individual flexibility.

Why AstraZeneca?

Your work will directly protect the technology that advances life-changing medicines, linking day-to-day engineering with real impact for patients. You will collaborate with diverse experts who blend scientific curiosity with deep technical skill, and you will have the support and investment to experiment, learn and grow.

We bring unexpected teams together to solve problems that matter, using leading tools and data in a culture that values kindness alongside ambition. Here, you can shape resilient, modern security services that scale globally while building your craft through coaching, feedback and hands-on challenge.

Ready to Apply?

Step into this role to secure the digital backbone of our science — share your CV and help us raise the standard of trust at enterprise scale.

Date Posted

06-jul-2026

Closing Date

19-jul-2026

AstraZeneca embraces diversity and equality of opportunity.  We are committed to building an inclusive and diverse team representing all backgrounds, with as wide a range of perspectives as possible, and harnessing industry-leading skills.  We believe that the more inclusive we are, the better our work will be.  We welcome and consider applications to join our team from all qualified candidates, regardless of their characteristics.  We comply with all applicable laws and regulations on non-discrimination in employment (and recruitment), as well as work authorization and employment eligibility verification requirements.