PKI Implementation Engineer

Job Opportunity: PKI Engineer (6-Month Contract)

Location: London or Brighton (Open to either location)

Contract Duration: 6 Months

Job Type: Contract

About the Role

Are you an experienced Public Key Infrastructure (PKI) professional looking for your next challenge? We are currently seeking a highly skilled and motivated PKI Engineer for a 6-month contract. In this role, you will play a critical part in designing, deploying, and managing certificate lifecycles, working with industry-leading PKI products and cloud identity platforms.

If you have a strong background in cryptography, certificate management, and Azure ecosystems, we want to hear from you!

Key Requirements (What You Bring)

• Core PKI Expertise: Strong working knowledge of PKI management and concepts, including Certificate Authority (CA) deployment, template creation, and end-to-end certificate lifecycle management.
• PKI Products: Proven experience or exposure implementing solutions such as Keyfactor, EJBCA, Auto-enrollment, and Orchestration services.
• Microsoft & Azure Ecosystem: Solid understanding of Azure federation, identity synchronization, ADFS, and core networking concepts. Hands-on experience with Active Directory (AD), Azure AD, and Active Directory Certificate Services (ADCS), as well as NDES.
• Architecture & Design: Working knowledge of creating high-level architecture design diagrams (a specific focus on PKI architecture is a major plus).
• Identity & Access: Familiarity with Single Sign-On (SSO), SAML, and a strong understanding of claims-aware applications.
• Systems Administration: Deep understanding of roles and permissions across both Windows and Linux environments.
• Automation & Scripting: Proficiency in PowerShell scripting with the ability to create custom workflows for API integrations.
• Hardware & Lifecycle Management: Hands-on experience working with Hardware Security Modules (HSM) and Certificate Lifecycle Management (CLM) tools.

Desirable Skills (Bonus Points)

• Protocols: Knowledge and practical experience working with SCEP (Simple Certificate Enrollment Protocol), as well as ACME, CMP, and EST protocols.
• EJBCA: Advanced knowledge or specialized experience working specifically with EJBCA.
• IAM: Broad exposure to Identity and Access Management (IAM) principles and technologies.
• OS Familiarity: Comfort and familiarity working within Linux/Unix operating systems.
• ITSM Tools: Experience utilizing IT Service Management solutions such as ServiceNow or BMC Remedy.

#J-18808-Ljbffr