Senior PKI Engineer

• Design, build, and operate PKI solutions and environments.
• Manage Certificate Authority Administration, including Certificate Enrolment Web Service and Policy Web Service, and monitor Active Directory Certificate Services (ADCS).
• Manage Key Management Systems (KMS) to ensure robust cryptographic key security.
• Support and manage PKI and certificate deployment and automation, as well as Thales HSMs.
• Understand existing certificate use cases and prepare onboarding roadmaps to the new PKI service.
• Work with Cyber vulnerability assessment teams to prioritise onboarding to automated certificate management by applying technology understanding.
• Participate in the technical support of the PKI managed service for Sky and Comcast users.
• Perform certificate checks, including issuing and revoking certificates.
• Work with App Service managed certificates, private and public certificates, and certificates from Key Vault.

Technologies:

• Active Directory
• Support
• Mobile
• REST
• Security
• Web

More:

We are Sky, where we believe in better and turn big ideas into products, content and services millions of people love. Our Tech, Product and Data teams build and innovate across broadband, broadcast, streaming and mobile, and our Cyber Security team helps keep our business, customers, colleagues and partners safe from increasingly sophisticated cyber threats. We work across the UK, Italy and Germany, offer a range of rewards and perks including Sky Q, Sky Glass at an exclusive rate, a generous pension package, private healthcare, discounted mobile and broadband, and Sky VIP rewards and experiences, and we support hybrid working. This role is based at our Brick Lane office in East London, close to Aldgate East and within walking distance of Liverpool Street.

• Technical and professional leadership across the discipline.
• Deep knowledge and understanding of Information and/or Cyber Security.
• Knowledge of cybersecurity principles and practices and an understanding of security frameworks such as NIST and ISO27001.
• Good written and verbal communication skills to liaise with stakeholders at varying levels of seniority across the business.
• Proficient in written and spoken English.
• Additional language skills will be an advantage.
• Good understanding of PKI systems and services, ACME protocol, and use of RESTful APIs.
• Hands-on experience with Certificate Authority Administration, ADCS monitoring, and related tasks.
• Familiarity with Data-in-motion and Data-at-rest encryption techniques.
• Expertise in PKI machine identity technologies such as SSH, SSL, and TLS.
• Experience managing Key Management Systems (KMS) for cryptographic key security.
• Hands-on experience with PKI and certificate deployment and automation.
• Hands-on experience with Thales HSMs.