PKI SME

Project Freelance; United Kingdom; Hybrid; GBP 129,000 - 138,000; Full time

Job summary

LA International is seeking a PKI SME to architect and deliver PKI solutions within Defence and government sectors. The role focuses on leading PKI design, certificate policies, and HSM integration across high-profile projects.

You will drive governance, CPS development, and risk management while collaborating with project teams and customers under strict security standards.

Qualifications

• Lead the PKI architecture and design for multiple high-profile projects.
• Be the PKI subject matter expert for various projects and environments.
• Develop PKI technology to meet project and customer requirements.
• Lead on asymmetric cryptography, including X509 certificates and key management.
• Create CPS and ensure PKI governance and CPS alignment with CPs.

Responsibilities

• Produce and guide Certification Practice Statements (CPS) for customer approval.
• Manage PKI artefacts and activities for governance and audit.
• Brief project peers and stakeholders on PKI security responsibilities.
• Govern PKI services to CPS requirements and audit readiness.
• Install, configure and manage Gemalto SafeNet HSMs.
• Collaborate with teams and customers using strong communication.

Skills

PKI architecture

HSM management

Certificate policies

Cryptography governance

Risk management

Strong communication

Education

TOGAF/MCSE/CCNP/VCAP

Tools

OpenSSL

Java Key Tool

Gemalto SafeNet HSM

Job description

PKI SME
12 months
£700-£750 inside IR35
DV Cleared

This is an opportunity to play your part in protecting our company, our customers, and our communities from a cyber-attack. Be part of a growing dedicated Defence security team and get ready to make a difference by bringing your PKI architect skills and experience onboard. You'll integrate straight into a high performing team, learning from those around you and from outstanding training and development resources to become even better at what you do. With the best technology at your fingertips, you'll be part of a friendly and flexible working environment where your contribution is always valued. Your future starts here.

What you'll do:

• Lead the PKI architecture and design for multiple high-profile projects
• Be the PKI subject matter expert for various projects, services, and environments
• Develop PKI technology to meet the requirements of the project and end customer
• Lead on all aspects of asymmetric cryptography that pertain to PKI, including X509 digital certificates and key management
• Produce, edit and/or lead on the development of Certification Practice Statements (CPS) that can be approved by the customer and accepted for the project/service teams responsible for PKI operations
• Manage the documentation, artefacts and activities required for robust PKI governance and management as described in the CPS(s)
• Promote and brief project peers, senior management, and PKI stakeholders on the security responsibilities of the PKI service
• Manage PKI related risk and ensure PKI services are operated as stipulated in the CPS and can be stood up for audit.
• Have deep seated knowledge and experience with PKI products ranging between Certification Authority (CA) software and Hardware Security Modules (HSM), including their design, implementation and configuration
• Have knowledge and experience of creating certificate profiles, IETF RFC5280 and how various applications behave when processing digital certificates
• Have deep understanding of Certificate Policies (CP), and how CPS documents relate to them, as well as knowledge of IETF RFC 3647
• Have performed install, configuration and managed (Gemalto\\SafeNet) Hardware Security Module (HSM)
• Be self-motivated, proactive and be willing to challenge the status quo
• Be comfortable working to strict deadlines
• Be organised and able to multi-task
• Use your initiative and be comfortable working with changing requirements
• Strong communication and collaboration skills with project teams and the customer

You'll definitely:

• Have deep seated knowledge and experience with PKI products ranging between Certification Authority (CA) software and Hardware Security Modules (HSM), including their design, implementation and configuration
• Have knowledge and experience of creating certificate profiles, IETF RFC5280 and how various applications behave when processing digital certificates
• Have deep understanding of Certificate Policies (CP), and how CPS documents relate to them, as well as knowledge of IETF RFC 3647
• Have performed install, configuration and managed (Gemalto\\SafeNet) Hardware Security Module (HSM)
• Be self-motivated, proactive and be willing to challenge the status quo
• Be comfortable working to strict deadlines
• Be organised and able to multi-task
• Use your initiative and be comfortable working with changing requirements
• Strong communication and collaboration skills with project teams and the customer

You might even:

• Possess a recognised formal qualification in TOGAF/MCSE/CCNP/VCAP
• Have experience working with Defence PKI
• Experience with Windows Servers 2016/2019/2022
• Have knowledge of OpenSSL/Cetreq/Java Key Tool
• Be experienced in working in major public industry sectors; Defence (MoD) and/or HM Government departments or agencies
• Have knowledge and experience of the following security standards - ISO27001, MoD JSP604, 440 & 490, NCSC, NIST

LA International is an award-winning partner of choice for many of the world's most influential companies and government organisations. Holding Enhanced Government Security Accreditation, we are recognised as the European market leader in the delivery of Security Cleared talent to organisations that demand the very highest levels of security, compliance and assurance.

A multiple award-winning organisation, having secured the prestigious Queens Award for Enterprise: International Trade over consecutive years. We are committed to fostering an inclusive, equitable and accessible workplace where everyone feels valued and supported. We welcome applications from all individuals, regardless of background or identity, and we encourage candidates who may not meet every listed requirement to still apply. If you require any adjustments or support during the recruitment process, please let us know and we will work with you to ensure a fair and accessible experience.

Please Note: If a high volume of applications is received, only candidates shortlisted will be contacted.