PKI Security Engineer - CLM, Cryptography, PQC

Up to £700 per day (Inside IR35 - Umbrella)
6 months initial contract
London / Hybrid (2-3 days per week on-site)

My client is an International Investment Bank who are urgently recruiting for a PKI Security Engineer with strong knowledge of Cryptography, Certificate Lifecycle Management (CLM) and familiarity with PQC (Post Quantum Cryptography) to play a key role on a business-critical Security Programme.

The role will focus on leading the design, implementation and phased rollout of an enterprise-wide Certificate Lifecycle Management (CLM) platform across multiple business entities, while helping shape the organisation's broader PKI and cryptography strategy. Working closely with security, infrastructure, cloud and application teams, you will drive certificate automation, strengthen security controls and support the organisation's future post-quantum cryptography readiness.

Key Requirements:

• Proven experience in PKI Security Engineering, along with implementing / rolling out Certificate Lifecycle Management (CLM) platforms such as Keyfactor / Venafi / DigiCert / AppViewX.
• Expertise in at least one leading platform such as Keyfactor Command / DigiCert Trust Lifecycle Manager / Venafi TLS Protect.
• Deep knowledge of Microsoft AD CS, Certificate Authorities, X.509 certificates, CRL, OCSP and Certificate Lifecycle Management (CLM).
• Experience of automating Certificate management across Windows, Linux, cloud and ideally Kubernetes environments.
• Strong understanding of Certificate automation technologies including ACME, SCEP, EST and REST APIs.
• Experience of integrating PKI solutions with HSMs, cloud platforms, DevOps tooling and enterprise applications.
• Awareness of PQC (Post Quantum Cryptography)
• Flexible approach towards hybrid working

Nice to have:

• Background working within highly regulated Banking / Financial Services industry (or equivalent).
• Scripting and Automation experience using PowerShell, Python or Bash.
• Working knowledge of REST APIs, JSON, OAuth/service authentication and secure automation patterns.
• Familiarity with Infrastructure as Code (IaC) and configuration automation, Terraform / Ansible, CI/CD platforms and / or Git-based source control.
• SQL skills for reporting and data analysis for certificate inventory, ownership and risk tracking.

Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk