IKP Build Engineer CGEMJP00322588

Role Title: IKP Build Engineer

Duration: contract to run until 31/12/2026

Location: Sheffield, Hybrid 3 days per week onsite

Rate: up to £495.88 p/d Umbrella inside IR35

Role purpose / summary

Our client is seeking a skilled IKP Build Engineer to design, build, and implement Identity and Key Management Platform (IKP) components for the OpenShift infrastructure migration project. This role focuses on delivering secure identity and cryptographic key management solutions that integrate seamlessly with the bank's enterprise security architecture and OpenShift clusters.

Key Skills/ requirements

Build & Implementation:

• Develop and deploy IKP components to support OpenShift workloads.
• Configure key management systems for encryption, signing, and secure storage.
• Integrate IKP with the bank's identity and access management (IAM) systems.

Automation & Integration:

• Automate key lifecycle operations (generation, rotation, revocation).
• Enable API-based integration between IKP and OpenShift clusters.
• Collaborate with DevOps and Automation Engineers to embed IKP processes in CI/CD pipelines.

Security & Compliance:

• Ensure IKP configurations meet the bank's security standards and regulatory requirements.
• Implement robust authentication and authorization mechanisms.
• Support audits and compliance checks related to cryptographic controls.

Documentation & Governance:

• Maintain detailed build documentation and operational runbooks.
• Adhere to the bank's IT governance and change management processes.

Required Skills & Qualifications:

• Hands-on experience in building and configuring identity and key management systems.
• Strong knowledge of cryptographic principles, PKI, TLS/SSL, and encryption standards.
• Familiarity with OpenShift, Kubernetes, and container security best practices.
• Proficiency in automation tools (e.g., Ansible, Terraform) for IKP deployment.
• Experience with enterprise IAM solutions and API integration.
• Relevant certifications (e.g., CISSP, CISM, or cloud security certifications) preferred.

All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply!