PKI Security Engineer/CLM Implementation Engineer

Job Description

PKI Security Engineer/CLM Implementation Engineer

We are working with a leading investment banking client based in London to secure for them a PKI Security Engineer/CLM Implementation Engineer. We are looking for a hands-on CLM (Certificate Lifecycle Management) Implementation Engineer to lead the deployment and operationalisation of a selected CLM and Post-Quantum Cryptography (PQC) platform.

This is an initial 6 month contract.

Paying £700 per day (Inside IR35), hybrid working (2/3 days a week in the London office).

Key skills:

• Senior PKI/CLM Engineer with proven hands-on experience implementing enterprise CLM (Certificate Lifecycle Management) platforms across complex, multi-entity environments.
• Strong PKI expertise, including Microsoft AD CS, Certificate Authorities, certificate templates, trust chains, OCSP, CRL and HSM integration.
• Experience automating certificate lifecycle management across Windows, Linux, cloud, Kubernetes, network and DevOps environments, using ACME, SCEP, EST and APIs.
• Knowledge of Post-Quantum Cryptography (PQC), cryptographic discovery and migration planning, ideally within regulated financial services environments.
• Proven hands-on experience implementing and managing enterprise CLM platforms.
• Strong PKI (Public Key Infrastructure) knowledge and certificate lifecycle management expertise.
• Experience with platforms such as Venafi, Keyfactor or DigiCert.
• Experience deploying and operationalising CLM solutions rather than solely administering Microsoft AD CS/Windows PKI.

Responsibilities:

• Lead the end-to-end implementation, configuration and deployment of the selected CLM and PQC tooling.
• Establish and operationalise certificate lifecycle management processes, replacing Legacy encrypted certificates.
• Troubleshoot technical issues and act as the operational subject-matter expert for the platform.
• Support the transition towards post-quantum cryptographic resilience
• Integrate CLM with enterprise infrastructure, applications, cloud platforms and PKI systems, automating certificate issuance, renewal, deployment and revocation.
• Establish certificate discovery, inventory, monitoring and governance processes, identifying and remediating expired, weak, vulnerable or manually managed certificates.
• Support Post-Quantum Cryptography (PQC) readiness, assessing cryptographic risks, developing migration plans and providing technical SME guidance across infrastructure, security and application teams.

Please apply now for immediate consideration and further details.

Scot Lewis Associates Ltd is acting as an employment business.