PKI Security Engineer - CLM, Cryptography, PQC

My client is an International Investment Bank who are urgently recruiting for a PKI Security Engineer with strong knowledge of Cryptography, Certificate Lifecycle Management (CLM) and familiarity with PQC (Post Quantum Cryptography) to play a key role on a business-critical Security Programme. The role will focus on leading the design, implementation and phased rollout of an enterprise-wide Certificate Lifecycle Management (CLM) platform across multiple business entities, while helping shape the organisation’s broader PKI and cryptography strategy. Working closely with security, infrastructure, cloud and application teams, you will drive certificate automation, strengthen security controls and support the organisation’s future post-quantum cryptography readiness., * Proven experience in PKI Security Engineering, along with implementing / rolling out Certificate Lifecycle Management (CLM) platforms such as Keyfactor / Venafi / DigiCert / AppViewX.

• Expertise in at least one leading platform such as Keyfactor Command / DigiCert Trust Lifecycle Manager / Venafi TLS Protect.
• Deep knowledge of Microsoft AD CS, Certificate Authorities, X.509 certificates, CRL, OCSP and Certificate Lifecycle Management (CLM).
• Experience of automating Certificate management across Windows, Linux, cloud and ideally Kubernetes environments.
• Strong understanding of Certificate automation technologies including ACME, SCEP, EST and REST APIs.
• Experience of integrating PKI solutions with HSMs, cloud platforms, DevOps tooling and enterprise applications.
• Awareness of PQC (Post Quantum Cryptography)

Nice to have:

• Background working within highly regulated Banking / Financial Services industry (or equivalent).
• Scripting and Automation experience using PowerShell, Python or Bash.
• Working knowledge of REST APIs, JSON, OAuth/service authentication and secure automation patterns.
• Familiarity with Infrastructure as Code (IaC) and configuration automation, Terraform / Ansible, CI/CD platforms and / or Git-based source control.
• SQL skills for reporting and data analysis for certificate inventory, ownership and risk tracking., * Access Control Systems
• Cloud Services & Infrastructure
• Communication Skills
• Health and Safety Principles
• Infrastructure Management
• Maintenance Activities
• Microsoft Azure
• Operating System Security
• Physical & Electronic Security Systems
• Television Installation & Maintenance