PKI Implementation Engineer

Randstad Technologies Recruitment; Greater London; On-site; GBP 89,544,000 - 130,872,000; Full time

Job summary

Randstad Technologies Recruitment is seeking an experienced PKI Engineer for a 6-month contract in London or Brighton. The role focuses on designing, deploying, and managing certificate lifecycles across PKI platforms and cloud identity services.

Candidates should have strong cryptography and PKI expertise, experience with Keyfactor/EJBCA, and hands-on Azure federation and ADCS. The position emphasizes automation with PowerShell and cross-platform administration.

Qualifications

• Strong PKI management and lifecycle experience.
• Experience with PKI products and cloud identity platforms.
• Proficient in scripting and automation for PKI workflows.

Responsibilities

• Design, deploy and manage certificate lifecycles.
• Implement and operate PKI solutions with Keyfactor, EJBCA, and related tools.
• Collaborate on Azure federation, ADCS and identity services.

Skills

PKI expertise

CA deployment

PKI products

Azure AD

ADCS

ADFS

SSO

SAML

PowerShell

HSM

CLM tools

Linux/Windows

Automation

Tools

PKI tooling

Cloud platforms

Job description

Job Opportunity: PKI Engineer (6-Month Contract)

Location: London or Brighton (Open to either location)

Contract Duration: 6 Months

Job Type: Contract

About the Role

Are you an experienced Public Key Infrastructure (PKI) professional looking for your next challenge? We are currently seeking a highly skilled and motivated PKI Engineer for a 6-month contract. In this role, you will play a critical part in designing, deploying, and managing certificate lifecycles, working with industry-leading PKI products and cloud identity platforms.

If you have a strong background in cryptography, certificate management, and Azure ecosystems, we want to hear from you!

Key Requirements (What You Bring)

• Core PKI Expertise: Strong working knowledge of PKI management and concepts, including Certificate Authority (CA) deployment, template creation, and end-to-end certificate lifecycle management.
• PKI Products: Proven experience or exposure implementing solutions such as Keyfactor, EJBCA, Auto-enrollment, and Orchestration services.
• Microsoft & Azure Ecosystem: Solid understanding of Azure federation, identity synchronization, ADFS, and core networking concepts. Hands-on experience with Active Directory (AD), Azure AD, and Active Directory Certificate Services (ADCS), as well as NDES.
• Architecture & Design: Working knowledge of creating high-level architecture design diagrams (a specific focus on PKI architecture is a major plus).
• Identity & Access: Familiarity with Single Sign-On (SSO), SAML, and a strong understanding of claims-aware applications.
• Systems Administration: Deep understanding of roles and permissions across both Windows and Linux environments.
• Automation & Scripting: Proficiency in PowerShell scripting with the ability to create custom workflows for API integrations.
• Hardware & Lifecycle Management: Hands-on experience working with Hardware Security Modules (HSM) and Certificate Lifecycle Management (CLM) tools.

Desirable Skills (Bonus Points)

• Protocols: Knowledge and practical experience working with SCEP (Simple Certificate Enrollment Protocol), as well as ACME, CMP, and EST protocols.
• EJBCA: Advanced knowledge or specialized experience working specifically with EJBCA.
• IAM: Broad exposure to Identity and Access Management (IAM) principles and technologies.
• OS Familiarity: Comfort and familiarity working within Linux/Unix operating systems.
• ITSM Tools: Experience utilizing IT Service Management solutions such as ServiceNow or BMC Remedy.