SC Cleared PKI Consultant – Stevenage/Remote – 15 Days

SC Cleared PKI Consultant – Stevenage/Remote – 15 Days – (RL8133)

Start Date: ASAPDuration: 15 DaysPay Rate: CompetitiveIR35 Status: Inside IR35Location: Stevenage/RemoteClearance: Security Clearance is highly desirable

The Role

The requirement is to enable Microsoft AD CS to issue digital certificates within one Management Forest and one Resource Forest currently in scope, whilst producing a reusable build guide for future Forest deployments.

The environment consists of:

• Two Single Domain Active Directory forests (one Management Forest and one Resource Forest)
• Windows Server 2016 Forest Functional Level
• Windows Server 2022 Operating System
• Established trust relationships between forests and sites
• Mixed Windows and Linux estate, with the majority of Servers running Linux

The successful consultant will support the project through discovery, design, implementation, documentation and handover.

Key Deliverables

• Discovery and Design Workshop
• Design Document for AD CS, NDES and five certificate templates
• Build of agreed PKI Environment including NDES and certificate templates
• Creation of build documentation and deployment guide for future Forest implementations
• Support the AD CS deployment whilst certificate templates are validated across Linux environments
• Review of PKI deployment in an additional Resource Forest

Technical Skills Required

Must-Have Skills

• Active Directory Certificate Services (AD CS)
• Public Key Infrastructure (PKI)
• Network Device Enrollment Service (NDES)
• Certificate Enrollment Policy (CEP)
• Certificate Enrollment Services (CES)
• Active Directory
• Windows Server 2016/2022
• Certificate template design and deployment
• Enterprise PKI architecture and implementation
• Technical design documentation
• Build and deployment documentation
• Security-focused infrastructure design

Scope Includes

• High-level design document for AD CS environment including Linux coexistence features such as NDES
• Design and configuration of certificate templates for:
  • Web Server certificates
  • Server-to-Server encryption
  • Domain Controllers for secure LDAP/GC
  • iGEL certificates
  • Application certificates

Deployment of

1. 1 x Offline Root CA
2. 4 x Issuing CAs
3. Up to 4 x NDES Servers

• Certificate template configuration and testing
• PKI deployment review and assurance

Soft Skills

• Strong stakeholder engagement skills
• Ability to lead discovery and design workshops
• Excellent documentation and communication skills
• Experience working in secure and highly regulated environments
• Strong troubleshooting and problem-solving capability
• Ability to work independently and lead technical delivery workstreams
• Experience delivering structured handovers and operational documentation

#J-18808-Ljbffr…