PKI Migration Architect – DigiCert ONE, London

Xcede Recruitment Solutions; Greater London; On-site; GBP 129,000 - 166,000; Full time

Job summary

Xcede Recruitment Solutions in London is seeking an experienced PKI Architect to lead the migration from on-prem AD CS to DigiCert ONE, ensuring continuity of service across a large distributed enterprise. You will define security RBAC, produce architecture runbooks, and collaborate with Global Digital and member firms.

The role requires 5+ years of hands-on PKI experience, strong AD CS knowledge, and high-quality technical documentation skills; a like-for-like SaaS PKI transition is planned

Qualifications

• Strong, demonstrable understanding of Active Directory Certificate Services (AD CS).
• Minimum 5 years' hands-on experience with enterprise-grade certificate management.
• In-depth knowledge of certificates, PKI concepts, and encryption technologies.
• General working knowledge of Active Directory.
• Experience designing and implementing security and RBAC models.
• Proven experience producing high-quality technical documentation (architecture documents, runbooks, operational guides).
• Experience supporting or participating in formal security review processes.

Responsibilities

• Design the target-state architecture for migrating certificate services from on-premise AD CS to DigiCert ONE
• Define and document the security and RBAC model for the new certificate environment
• Produce architecture and operational documentation for the Global Digital operational team
• Develop runbooks and operational guidance for consuming member firms
• Support formal customer security reviews, providing documentation and subject matter expertise as required
• Advise on certificate lifecycle management, encryption standards, and PKI best practice throughout the migration
• Work with technical and business stakeholders to ensure a smooth, low-risk transition with minimal disruption to certificate consumers

Skills

AD CS

PKI mgmt

PKI concepts

Security RBAC

Technical docs

Security reviews

DigiCert ONE

Tools

DigiCert ONE

Job description

Xcede Recruitment Solutions in London is seeking an experienced PKI Architect to lead the migration from on-prem AD CS to DigiCert ONE, ensuring continuity of service across a large distributed enterprise. You will define security RBAC, produce architecture runbooks, and collaborate with Global Digital and member firms.

The role requires 5+ years of hands-on PKI experience, strong AD CS knowledge, and high-quality technical documentation skills; a like-for-like SaaS PKI transition is planned