PKI Security Engineer/CLM Implementation Engineer

PKI Security Engineer/CLM Implementation Engineer

We are working with a leading investment banking client based in London to secure for them a PKI Security Engineer/CLM Implementation Engineer. We are looking for a hands–on CLM (Certificate Lifecycle Management) Implementation Engineer to lead the deployment and operationalisation of a selected CLM and Post–Quantum Cryptography (PQC) platform.

This is an initial 6 month contract.

Paying GBP700 per day (Inside IR35), hybrid working (2/3 days a week in the London office).

Key skills:

• Senior PKI/CLM Engineer with proven hands–on experience implementing enterprise CLM (Certificate Lifecycle Management) platforms across complex, multi–entity environments.
• Strong PKI expertise, including Microsoft AD CS, Certificate Authorities, certificate templates, trust chains, OCSP, CRL and HSM integration.
• Experience automating certificate lifecycle management across Windows, Linux, cloud, Kubernetes, network and DevOps environments, using ACME, SCEP, EST and APIs.
• Knowledge of Post–Quantum Cryptography (PQC), cryptographic discovery and migration planning, ideally within regulated financial services environments.
• Proven hands–on experience implementing and managing enterprise CLM platforms.
• Strong PKI (Public Key Infrastructure) knowledge and certificate lifecycle management expertise.
• Experience with platforms such as Venafi, Keyfactor or DigiCert.
• Experience deploying and operationalising CLM solutions rather than solely administering Microsoft AD CS/Windows PKI.

Responsibilities:

• Lead the end–to–end implementation, configuration and deployment of the selected CLM and PQC tooling.
• Establish and operationalise certificate lifecycle management processes, replacing Legacy encrypted certificates.
• Troubleshoot technical issues and act as the operational subject–matter expert for the platform.
• Support the transition towards post–quantum cryptographic resilience
• Integrate CLM with enterprise infrastructure, applications, cloud platforms and PKI systems, automating certificate issuance, renewal, deployment and revocation.
• Establish certificate discovery, inventory, monitoring and governance processes, identifying and remediating expired, weak, vulnerable or manually managed certificates.
• Support Post–Quantum Cryptography (PQC) readiness, assessing cryptographic risks, developing migration plans and providing technical SME guidance across infrastructure, security and application teams.

#J-18808-Ljbffr…