PKI & Cloud Architect

Ncounter Limited; England; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading Defence contractor in the UK is looking for an experienced PKI & Cloud Architect to drive the design of secure, large-scale infrastructures. The role includes defining enterprise-grade PKI solutions and engaging with stakeholders to ensure compliance and alignment with program goals. Essential skills include building and maintaining PKI infrastructures, strong knowledge of Active Directory, and designing cloud solutions across AWS, Azure, and GCP environments. This is a hybrid role offering outside IR35 compliance.

Benefits

Hybrid work model

Competitive pay

Qualifications

• Experience with enterprise PKI and trust infrastructures including Root/Issuing CAs.
• Strong knowledge of Active Directory and certificate management.
• Design background in secure cloud environments.

Responsibilities

• Define and deliver enterprise-grade PKI infrastructures and management systems.
• Develop design artefacts and standards for PKI and identity solutions.
• Engage stakeholders through design reviews and alignment meetings.

Skills

Enterprise PKI building and maintenance

Active Directory integration

Designing secure cloud solutions

Certificate-based access controls

Tools

VMWare Cloud Foundation

AWS

Azure

GCP

Job description

£#removed# p/d Outside IR35 / DV Cleared | Hybrid (South West, UK) / Ref: NC-(phone number removed)

PKI & Cloud Architect (Contract)

Ncounter is seeking an experienced DV Cleared Architect to support a major Defence programme, driving the design and delivery of secure, large-scale infrastructure across both private and public cloud environments. This position focuses heavily on enterprise PKI and trust services, integrating modern authentication, federation, and certificate management capabilities across highly assured platforms.

You’ll take a leading role in shaping resilient architectures within secure, air‑gapped environments, ensuring compliance with MOD and NCSC principles while delivering practical, scalable solutions to complex mission systems.

Key Responsibilities:

• Define and deliver enterprise‑grade PKI and trust infrastructures covering Root/Issuing CAs, Registration Authorities, Validation Authorities, and Certificate Lifecycle Management systems
• Develop high‑quality design artefacts, standards, and documentation for PKI, identity, and cross‑domain architectures
• Provide technical guidance on Active Directory integration, federation services, and certificate‑based authentication methods
• Architect solutions using VMWare Cloud Foundation (VCF) and contribute to hybrid deployments spanning AWS, GCP, and Azure environments
• Engage with stakeholders through technical workshops, design reviews, and assurance boards to align design outputs with programme goals

Essential Skills & Experience:

• Hands‑on experience building and maintaining enterprise PKI and trust infrastructures (Root/Issuing CAs, RA, VA, CLM). Familiarity with Defence or government PKI ecosystems is advantageous
• Strong understanding of Active Directory, federation and identity management platforms, and certificate‑based access controls
• Experience designing secure cloud solutions within private (VCF) and hyperscale (AWS, Azure, GCP) environments
• Knowledge of certificate auto‑enrolment, key management, and hardware security modules (HSMs)
• Familiarity with relevant standards and policies such as X.509, RFC5280, TLS, FIPS 140‑3, and NCSC or NIST identity guidance
• Background delivering within high‑assurance, disconnected, or restricted network environments

This contract offers the chance to take technical ownership of critical design elements within a secure Defence platform. If you combine deep PKI knowledge with a track record of secure cloud solution delivery, Ncounter would welcome a confidential discussion