SC Cleared PKI Consultant - Stevenage/Remote - 15 Days

SC Cleared PKI Consultant - Stevenage/Remote - 15 Days - (RL8133)

We recruiting for a SC Cleared PKI Consultant to support the design and deployment of a Microsoft Active Directory Certificate Services (AD CS) environment within a highly secure enterprise estate. This is an excellent opportunity for an experienced PKI specialist with strong AD CS, NDES and certificate management expertise, ideally within security-conscious and complex enterprise environments.

Start Date: ASAP
Duration: 15 Days
Pay Rate: Competitive
IR35 Status: Inside IR35
Location: Stevenage/Remote
Clearance: Security Clearance is highly desirable

The Role

The requirement is to enable Microsoft AD CS to issue digital certificates within one Management Forest and one Resource Forest currently in scope, whilst producing a reusable build guide for future Forest deployments.

The environment consists of:

• Two Single Domain Active Directory forests (one Management Forest and one Resource Forest)
• Windows Server 2016 Forest Functional Level
• Windows Server 2022 Operating System
• Established trust relationships between forests and sites
• Mixed Windows and Linux estate, with the majority of Servers running Linux

The successful consultant will support the project through discovery, design, implementation, documentation and handover.

Key Deliverables

• Discovery and Design Workshop
• Design Document for AD CS, NDES and five certificate templates
• Build of agreed PKI Environment including NDES and certificate templates
• Creation of build documentation and deployment guide for future Forest implementations
• Support the AD CS deployment whilst certificate templates are validated across Linux environments
• Review of PKI deployment in an additional Resource Forest

Technical Skills Required

Must-Have Skills

• Active Directory Certificate Services (AD CS)
• Public Key Infrastructure (PKI)
• Network Device Enrollment Service (NDES)
• Certificate Enrollment Policy (CEP)
• Certificate Enrollment Services (CES)
• Active Directory
• Windows Server 2016/2022
• Certificate template design and deployment
• Enterprise PKI architecture and implementation
• Technical design documentation
• Build and deployment documentation
• Security-focused infrastructure design

Scope Includes

• High-level design document for AD CS environment including Linux coexistence features such as NDES
• Design and configuration of certificate templates for:

Web Server certificates
Server-to-Server encryption
Domain Controllers for secure LDAP/GC
iGEL certificates
Application certificates

• Deployment of:

1. 1 x Offline Root CA
2. 4 x Issuing CAs
3. Up to 4 x NDES Servers

• Certificate template configuration and testing
• PKI deployment review and assurance

Soft Skills

• Strong stakeholder engagement skills
• Ability to lead discovery and design workshops
• Excellent documentation and communication skills
• Experience working in secure and highly regulated environments
• Strong troubleshooting and problem-solving capability
• Ability to work independently and lead technical delivery workstreams
• Experience delivering structured handovers and operational documentation

To apply for this SC Cleared PKI Consultant contract job, please click the button below and submit your latest CV.
Curo Services endeavours to respond to all applications, however this may not always be possible during periods of high volume. Thank you for your patience.
Curo Services is a trading name of Curo Resourcing Ltd and acts as an Employment Business for contract and temporary recruitment as well as an Employment Agency in relation to permanent vacancies.