• Proven experience designing and delivering enterprise PKI environments from inception through production operation.
• Extensive experience designing Root CA, Intermediate CA, and Issuing CA architectures.
• 10+ years of experience working with enterprise PKI, trust services, or cryptographic infrastructure.
• Strong understanding of offline Root CA designs, trust hierarchy models, certificate policy development, and PKI governance.
• Experience implementing and operating HSM-backed PKI environments.
• Deep knowledge of X.509 certificates, PKCS standards, CRLs, OCSP, certificate validation, and trust chains.
• Proven experience leading PKI programmes or transformations across multiple organisations.
• Ability to engage effectively with senior stakeholders, architects, engineers, auditors, and operational teams.
• Experience with Venafi, Keyfactor, DigiCert Trust Lifecycle Manager, Sectigo, EJBCA, HashiCorp Vault, or equivalent platforms.
• Experience with Microsoft Active Directory Certificate Services (AD CS) design and migration programmes.
• Experience implementing PKI within AWS, Azure, Kubernetes, and hybrid cloud environments.
• Experience supporting financial services, regulated industries, or large-scale enterprise environments.
• Relevant industry certifications in security, architecture, cloud, or cryptography.
• Contract Details
• Contract Details
• Fixed Term Contract
• Hybrid working model
• London-based role
• Competitive package dependent on experience