PKI Security Engineer/CLM Implementation Engineer

We are working with a leading investment banking client based in London to secure for them a PKI Security Engineer/CLM Implementation Engineer. We are looking for a hands-on CLM (Certificate Lifecycle Management) Implementation Engineer to lead the deployment and operationalisation of a selected CLM and Post-Quantum Cryptography (PQC) platform., * Lead the end-to-end implementation, configuration and deployment of the selected CLM and PQC tooling.

• Establish and operationalise certificate lifecycle management processes, replacing Legacy encrypted certificates.
• Troubleshoot technical issues and act as the operational subject-matter expert for the platform.
• Support the transition towards post-quantum cryptographic resilience
• Integrate CLM with enterprise infrastructure, applications, cloud platforms and PKI systems, automating certificate issuance, renewal, deployment and revocation.
• Establish certificate discovery, inventory, monitoring and governance processes, identifying and remediating expired, weak, vulnerable or manually managed certificates.
• Support Post-Quantum Cryptography (PQC) readiness, assessing cryptographic risks, developing migration plans and providing technical SME guidance across infrastructure, security and application teams., Keywords: CLM, Certificate Lifecycle Management, PKI, Public Key Infrastructure, Post-Quantum Cryptography (PQC), Cryptography, Crypto-Agility, Microsoft AD CS, Venafi, Keyfactor, DigiCert, X.509 Certificates, Certificate Authorities (CA), HSM, ACME, SCEP, EST, Certificate Automation, Certificate Management, Certificate Discovery, Certificate Renewal, Certificate Revocation, TLS/SSL, Cryptographic Inventory, CBOM, Cyber Security, Infrastructure Security, Banking, Investment bank.

• Senior PKI/CLM Engineer with proven hands-on experience implementing enterprise CLM (Certificate Lifecycle Management) platforms across complex, multi-entity environments.
• Strong PKI expertise, including Microsoft AD CS, Certificate Authorities, certificate templates, trust chains, OCSP, CRL and HSM integration.
• Experience automating certificate lifecycle management across Windows, Linux, cloud, Kubernetes, network and DevOps environments, using ACME, SCEP, EST and APIs.
• Knowledge of Post-Quantum Cryptography (PQC), cryptographic discovery and migration planning, ideally within regulated financial services environments.
• Proven hands-on experience implementing and managing enterprise CLM platforms.
• Strong PKI (Public Key Infrastructure) knowledge and certificate lifecycle management expertise.
• Experience with platforms such as Venafi, Keyfactor or DigiCert.
• Experience deploying and operationalising CLM solutions rather than solely administering Microsoft AD CS/Windows PKI.

Paying £700 per day (Inside IR35), hybrid working (2/3 days a week in the London office).