Security Engineer
James EvansUnited KingdomMIDPosted 2h ago
PKICLMMicrosoft AD CSHSMsCRLOCSPKeyfactorDigiCertVenafiAppViewXACMESCEPESTAPIsPowerShellPythonBashTerraformAnsibleCISSPCISM
About the Role
We are looking for a Security Engineer with expertise in PKI and CLM to join our client for a long-term contract position. This role involves leading the design, pilot, and phased rollout of CLM across EMEA entities, building automated certificate discovery and lifecycle controls.
Key Responsibilities
• Lead the design, pilot, and phased rollout of CLM across EMEA entities
• Build automated certificate discovery and lifecycle controls
• Support post-quantum cryptography (PQC) risk assessment and remediation over the next 1 to 3 years
Requirements
• Proven enterprise CLM implementation across multiple business units or regions
• Strong PKI knowledge, including Microsoft AD CS, HSMs, CRL, and OCSP
• Experience with Keyfactor, DigiCert, Venafi, AppViewX, or similar
• Certificate automation via ACME, SCEP, EST, and APIs
• Regulated financial services experience
Bonus points for:
• PQC and crypto-agility knowledge
• Scripting in PowerShell, Python, or Bash, and Terraform or Ansible
• CISSP, CISM, or cloud/Kubernetes certifications