Job Description n PKI Security Engineer/CLM Implementation Engineer n We are working with a leading investment banking client based in London to secure for them a PKI Security Engineer/CLM Implementation Engineer. We are looking for a hands-on CLM (Certificate Lifecycle Management) Implementation Engineer to lead the deployment and operationalisation of a selected CLM and Post-Quantum Cryptography (PQC) platform. n This is an initial 6 month contract. n Paying £700 per day (Inside IR35), hybrid working (2/3 days a week in the London office). n Key skills: n n Senior PKI/CLM Engineer with proven hands-on experience implementing enterprise CLM (Certificate Lifecycle Management) platforms across complex, multi-entity environments. n Strong PKI expertise, including Microsoft AD CS, Certificate Authorities, certificate templates, trust chains, OCSP, CRL and HSM integration. n Experience automating certificate life cycle management across Windows, Linux, cloud, Kubernetes, network and DevOps environments, using ACME, SCEP, EST and APIs. n Knowledge of Post-Quantum Cryptography (PQC), cryptographic discovery and migration planning, ideally within regulated financial services environments. n Proven hands-on experience implementing and managing enterprise CLM platforms. n Strong PKI (Public Key Infrastructure) knowledge and certificate life cycle management expertise. n Experience with platforms such as Venafi, Keyfactor or DigiCert. n Experience deploying and operationalising CLM solutions rather than solely administering Microsoft AD CS/Windows PKI. n n n Responsibilities: n n Lead the end-to-end implementation, configuration and deployment of the selected CLM and PQC tooling. n Establish and operationalise certificate life cycle management processes, replacing Legacy encrypted certificates. n Troubleshoot technical issues and act as the operational subject-matter expert for the platform. n Support the transition towards post-quantum cryptographic resilience n Integrate CLM with enterprise infrastructure, applications, cloud platforms and PKI systems, automating certificate issuance, renewal, deployment and revocation. n Establish certificate discovery, inventory, monitoring and governance processes, identifying and remediating expired, weak, vulnerable or manually managed certificates. n Support Post-Quantum Cryptography (PQC) readiness, assessing cryptographic risks, developing migration plans and providing technical SME guidance across infrastructure, security and application teams. n n Please apply now for immediate consideration and further details. n Scot Lewis Associates Ltd is acting as an employment business.
…