PKI Architect

A global leader in technology is seeking an experienced PKI Architect to join their established team of specialists. In this role, you will play a critical part in delivering highly secure network services for customers within Defence and Central Government. Working closely with solution architects, security architects, and project teams, you will ensure the successful design and delivery of high-assurance PKI solutions from concept to implementation.

This role is based onsite in Basingstoke due to the nature of the work and the successful candidate will need to already have active DV clearance. The daily rate for the role is up to £750 per day via an Umbrella company (inside IR35).

Key Responsibilities

• Provide PKI expertise to define and deliver major technical projects, strategies, and architectures.
• Collaborate with cross-functional teams to design and implement secure PKI solutions.
• Support the delivery of high-assurance services in compliance with security and regulatory standards.
• Produce high-level and low-level design documentation for PKI and cryptographic solutions.

Essential Skills & Experience

• Extensive knowledge of PKI and cryptography solution design.
• Hands-on experience with Microsoft Certificate Management Services, including:
  • Certification Authority
  • Online Responder
  • Network Device Enrolment (NDES) Services
  • Certificate Enrolment Web Services (CEP/CES)
  • Active Directory Domain Services
• Expert-level experience in SSL certificate management, including tools such as OpenSSL and Certutil.
• Strong understanding of Hardware Security Modules (HSM) and Key Management Server (KMS) technologies; direct experience with Thales HSM platforms is highly desirable.
• Advanced experience in cloud solution development with Azure or AWS architectures related to PKI management.
• Proven ability to produce HLD and LLD for cryptography and PKI solutions.