Job Description

Role: PKI Consultant - Cryptography & Certificate Management Specialist

Job Type: Contract

Inside IR35: 250 - 300 Pounds

Location: Leeds (Remote occasionally travel to office)

Experience Level: 5+ years

Job Summary:

We are seeking an experienced PKI Consultant with robust expertise in Public Key Infrastructure (PKI) architecture and cryptography. The ideal candidate will provide technical leadership in implementing and managing certificate lifecycle processes and secure key management. This role involves working with both Windows and Linux systems, leveraging automation scripting, and integrating advanced certificate authority platforms to support enterprise-level security requirements.

Core Responsibilities:

PKI & Cryptography Management:

Design and implement PKI architectures, including the deployment and management of Root and Issuing Certificate Authorities (CAs).

Manage certificate lifecycle processes, including issuing, renewal, and revocation, with an emphasis on automation and efficiency.

Oversee cryptographic key management practices and utilize tools such as Fortanix DSM to ensure secure key generation, storage, and usage.

Technical Implementation:

Administer Windows and Linux systems, managing certificate trust stores and ensuring proper integration across diverse enterprise environments.

Configure and manage certificate authority platforms such as Sectigo SCM and Microsoft CA.

Collaborate with IT and security teams for integrating PKI and cryptographic solutions with other enterprise systems.

Develop and deploy automation scripts (using PowerShell, Bash, or Python) to streamline certificate discovery, issuance, and renewal processes.

Best Practices & Compliance:

Ensure adherence to industry best practices and regulatory compliance regarding PKI, encryption, and certificate management.

Maintain thorough documentation of processes, configurations, and incident responses related to PKI operations.

Support audit and review processes to continuously improve certificate and key management procedures.

Required Skills & Experience:

Proven experience with Public Key Infrastructure (PKI) architecture, including a deep understanding of certificate chains, trust models, and Root/Issuing CAs.

Expertise in certificate lifecycle management (issuing, renewing, revoking, automating processes) and cryptographic key management.

Familiarity with enterprise certificate authority platforms, including Sectigo SCM and Microsoft CA.

Hands-on experience with Windows and Linux system administration for certificate trust store management.

Proficiency with scripting languages such as PowerShell, Bash, or Python for automation tasks.

Ability to work collaboratively with cross-functional teams and communicate technical concepts effectively.

Preferred Certifications:

Relevant industry certifications in PKI, cryptography, or security (e.g., Certified Information Systems Security Professional - CISSP, or related credentials).

Soft Skills:

Strong analytical and problem-solving skills.

Excellent communication and documentation abilities.

Adaptable and proactive in a fast-paced technical environment.

Attention to detail and commitment to security best practices.

Job Type: Full-time

Pay: 250.00-300.00 per day

Additional pay:

Bonus scheme
Schedule:

Monday to Friday
Work Location: Hybrid remote in Leeds LS1 8EQ

Application deadline: 04/07/2025
Reference ID: PKICon01
Expected start date: 01/07/2025