> Markdown version of [/jobs/ext/4610627-pki-security-engineer-clm-implementation-engineer](https://www.wearedevelopers.com/jobs/ext/4610627-pki-security-engineer-clm-implementation-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# PKI Security Engineer/CLM Implementation Engineer

- **Company:** Scot Lewis Associates Ltd
- **Location:** London, UK
- **Experience:** Expert
- **Salary:** £182,000.0
- **Contract:** Temporary contract
- **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Cloud Computing, Cyber Security, Linux, DevOps, Public Key Infrastructure, X.509, SSL Certificate Management, Transport Layer Security, Kubernetes
- **Published:** November 7, 2026
- **Apply:** https://www.careerboard.com/gb/en/find-jobs-in-United-Kingdom/-C3C2E3F8E03A23425E/

## About the Role

* Senior PKI/CLM Engineer with proven hands-on experience implementing enterprise CLM (Certificate Lifecycle Management) platforms across complex, multi-entity environments.
 * Strong PKI expertise, including Microsoft AD CS, Certificate Authorities, certificate templates, trust chains, OCSP, CRL and HSM integration.
 * Experience automating certificate lifecycle management across Windows, Linux, cloud, Kubernetes, network and DevOps environments, using ACME, SCEP, EST and APIs.
 * Knowledge of Post-Quantum Cryptography (PQC), cryptographic discovery and migration planning, ideally within regulated financial services environments.
 * Proven hands-on experience implementing and managing enterprise CLM platforms.
 * Strong PKI (Public Key Infrastructure) knowledge and certificate lifecycle management expertise.
 * Experience with platforms such as Venafi, Keyfactor or DigiCert.
 * Experience deploying and operationalising CLM solutions rather than solely administering Microsoft AD CS/Windows PKI.

## Description

We are working with a leading investment banking client based in London to secure for them a PKI Security Engineer/CLM Implementation Engineer. We are looking for a hands-on CLM (Certificate Lifecycle Management) Implementation Engineer to lead the deployment and operationalisation of a selected CLM and Post-Quantum Cryptography (PQC) platform., * Lead the end-to-end implementation, configuration and deployment of the selected CLM and PQC tooling.

 * Establish and operationalise certificate lifecycle management processes, replacing Legacy encrypted certificates.
 * Troubleshoot technical issues and act as the operational subject-matter expert for the platform.
 * Support the transition towards post-quantum cryptographic resilience
 * Integrate CLM with enterprise infrastructure, applications, cloud platforms and PKI systems, automating certificate issuance, renewal, deployment and revocation.
 * Establish certificate discovery, inventory, monitoring and governance processes, identifying and remediating expired, weak, vulnerable or manually managed certificates.
 * Support Post-Quantum Cryptography (PQC) readiness, assessing cryptographic risks, developing migration plans and providing technical SME guidance across infrastructure, security and application teams., Keywords: CLM, Certificate Lifecycle Management, PKI, Public Key Infrastructure, Post-Quantum Cryptography (PQC), Cryptography, Crypto-Agility, Microsoft AD CS, Venafi, Keyfactor, DigiCert, X.509 Certificates, Certificate Authorities (CA), HSM, ACME, SCEP, EST, Certificate Automation, Certificate Management, Certificate Discovery, Certificate Renewal, Certificate Revocation, TLS/SSL, Cryptographic Inventory, CBOM, Cyber Security, Infrastructure Security, Banking, Investment bank.