PKI SME

LA International; City Of London; On-site; GBP 129,000 - 138,000; Full time

Job summary

LA International is seeking a PKI SME for a 12-month contract in the UK. You will lead the PKI architecture and design for multiple high‑profile projects, and act as the PKI subject‑matter expert across services and environments, developing PKI technology to meet project requirements.

The role requires DV clearance and is inside IR35, with a daily rate of £700-£750. You will work within a Defence security team, partner with project teams and customers, and contribute to governance, policy, and

Qualifications

• Lead PKI architecture and design for high-profile projects.
• Deep knowledge of CA software, HSMs and PKI governance.
• Experience with X.509 certificates, CP/CPS concepts.
• DV clearance and ability to work inside IR35.

Responsibilities

• Lead the PKI architecture and design for multiple high-profile projects
• Be the PKI subject matter expert for various projects, services, and environments
• Develop PKI technology to meet project and customer requirements
• Lead on asymmetric cryptography related to PKI, including X509 certificates
• Produce CPS documents approved by the customer and project teams
• Manage PKI governance artefacts and risk in CPS compliance
• Promote PKI responsibilities to stakeholders, ensuring audit readiness
• Oversee PKI risk and ensure services meet CPS stipulations
• Hands-on with CA software and HSM configurations
• Create certificate profiles and understand RFC 5280/3647

Skills

PKI architecture

HSM experience

Certificate management

Cryptography

Documentation governance

Education

DV Clearance

Tools

Gemalto SafeNet HSM

OpenSSL

Java Keytool

Job description

PKI SME
12 months
£700-£750 inside IR35
DV Cleared

This is an opportunity to play your part in protecting our company, our customers, and our communities from a cyber-attack. Be part of a growing dedicated Defence security team and get ready to make a difference by bringing your PKI architect skills and experience onboard. You'll integrate straight into a high performing team, learning from those around you and from outstanding training and development resources to become even better at what you do. With the best technology at your fingertips, you'll be part of a friendly and flexible working environment where your contribution is always valued. Your future starts here.

What you'll do:

• Lead the PKI architecture and design for multiple high-profile projects
• Be the PKI subject matter expert for various projects, services, and environments
• Develop PKI technology to meet the requirements of the project and end customer
• Lead on all aspects of asymmetric cryptography that pertain to PKI, including X509 digital certificates and key management
• Produce, edit and/or lead on the development of Certification Practice Statements (CPS) that can be approved by the customer and accepted for the project/service teams responsible for PKI operations
• Manage the documentation, artefacts and activities required for robust PKI governance and management as described in the CPS(s)
• Promote and brief project peers, senior management, and PKI stakeholders on the security responsibilities of the PKI service
• Manage PKI related risk and ensure PKI services are operated as stipulated in the CPS and can be stood up for audit.
• Have deep seated knowledge and experience with PKI products ranging between Certification Authority (CA) software and Hardware Security Modules (HSM), including their design, implementation and configuration
• Have knowledge and experience of creating certificate profiles, IETF RFC5280 and how various applications behave when processing digital certificates
• Have deep understanding of Certificate Policies (CP), and how CPS documents relate to them, as well as knowledge of IETF RFC 3647
• Have performed install, configuration and managed (Gemalto\\SafeNet) Hardware Security Module (HSM)
• Be self-motivated, proactive and be willing to challenge the status quo
• Be comfortable working to strict deadlines
• Be organised and able to multi-task
• Use your initiative and be comfortable working with changing requirements
• Strong communication and collaboration skills with project teams and the customer

You'll definitely:

• Have deep seated knowledge and experience with PKI products ranging between Certification Authority (CA) software and Hardware Security Modules (HSM), including their design, implementation and configuration
• Have knowledge and experience of creating certificate profiles, IETF RFC5280 and how various applications behave when processing digital certificates
• Have deep understanding of Certificate Policies (CP), and how CPS documents relate to them, as well as knowledge of IETF RFC 3647
• Have performed install, configuration and managed (Gemalto\\SafeNet) Hardware Security Module (HSM)
• Be self-motivated, proactive and be willing to challenge the status quo
• Be comfortable working to strict deadlines
• Be organised and able to multi-task
• Use your initiative and be comfortable working with changing requirements
• Strong communication and collaboration skills with project teams and the customer

You might even:

• Possess a recognised formal qualification in TOGAF/MCSE/CCNP/VCAP
• Have experience working with Defence PKI
• Experience with Windows Servers 2016/2019/2022
• Have knowledge of OpenSSL/Cetreq/Java Key Tool
• Be experienced in working in major public industry sectors; Defence (MoD) and/or HM Government departments or agencies
• Have knowledge and experience of the following security standards - ISO27001, MoD JSP604, 440 & 490, NCSC, NIST

LA International is an award-winning partner of choice for many of the world's most influential companies and government organisations. Holding Enhanced Government Security Accreditation, we are recognised as the European market leader in the delivery of Security Cleared talent to organisations that demand the very highest levels of security, compliance and assurance.

A multiple award-winning organisation, having secured the prestigious Queens Award for Enterprise: International Trade over consecutive years. We are committed to fostering an inclusive, equitable and accessible workplace where everyone feels valued and supported. We welcome applications from all individuals, regardless of background or identity, and we encourage candidates who may not meet every listed requirement to still apply. If you require any adjustments or support during the recruitment process, please let us know and we will work with you to ensure a fair and accessible experience.

Please Note: If a high volume of applications is received, only candidates shortlisted will be contacted.