Operational Lead-PKI Certificate Services- 9 Months- Inside IR35- Hybrid in London
Contract Type: Initial 9 Month Contract
Rate: £500 per day inside IR35
Location: Hybrid in London
Role Overview:
A 9-month contract role based in London (Hybrid) paying £500 per day, focused on establishing and managing PKI Certificate Services operations within a large enterprise. The position is responsible for end-to-end certificate life cycle management, governance, and compliance while driving modernisation initiatives including Legacy cryptography remediation. The role also supports the organisation's readiness for emerging cryptographic standards including Post-Quantum Cryptography.
Key Responsibilities:
- Manage and operationalise PKI Certificate Services, driving the full certificate life cycle including issuance, renewal, revocation, and expiry handling.
- Implement and enhance automation for certificate processes, contributing to the wider certificate services roadmap and strategy.
- Define and enforce certificate governance frameworks, ensuring compliance with NIS2, NITC, and enterprise security policies.
- Identify and remediate Legacy cryptographic weaknesses, and support adoption readiness for Post-Quantum Cryptography (PQC).
- Collaborate across internal teams (ADCS environment), external providers such as DigiCert, and global stakeholders including US-based teams.
What You Will Ideally Bring:
-
PKI & certificate management- Strong, hands-on experience managing PKI infrastructure and certificate services at enterprise scale, covering the full certificate life cycle.
-
ADCS expertise- Proven hands-on experience with Active Directory Certificate Services (ADCS) in complex, large-scale environments.
-
External CA management- Experience working with external Certificate Authorities such as DigiCert, including integration, policy management, and governance.
-
Certificate life cycle automation- Demonstrated ability to implement and enhance automation for certificate processes, ideally using PowerShell or similar Scripting tools.
-
Cryptographic standards & compliance- Solid understanding of cryptographic protocols and standards, with knowledge of security governance frameworks and regulatory requirements such as NIS2; awareness of Post-Quantum Cryptography is a strong advantage.