Senior PKI & Crypto Security Engineer

sky; Greater London; On-site; GBP 95,000 - 130,000; Full time

Benefits offered by this job

Sky Q

Sky Glass

Pension

Private healthcare

Mobile/broadband discounts

Sky VIP rewards

Job summary

Sky is seeking a senior PKI/Cyber Security engineer in London to design, build, and operate PKI solutions and certificate environments. You will manage CA administration, enrolment, policy services, and monitor ADCS, while overseeing KMS for cryptographic keys and Thales HSMs.

You will onboard new PKI services, collaborate with vulnerability teams, and support PKI deployment for Sky and Comcast users, including certificate issuance and revocation.

Qualifications

• Strong leadership across Cyber Security discipline.
• Deep knowledge of information and cyber security; familiarity with NIST, ISO27001.
• Excellent written and verbal English; additional languages a plus.
• Solid PKI knowledge: ACME, RESTful APIs; CA Administration; ADCS monitoring.
• Familiarity with data-in-motion and data-at-rest encryption.
• Expertise in PKI machine identities: SSH, TLS, SSL.
• Experience managing Key Management Systems for cryptographic keys.
• Hands-on PKI deployment and automation.
• Thales HSMs experience.

Responsibilities

• Design, build, and operate PKI solutions and environments.
• Manage CA administration, enrolment and policy services; monitor ADCS.
• Manage Key Management Systems to secure cryptographic keys.
• Support PKI deployment, automation, and Thales HSMs.
• Assess existing certificate use-cases and onboard to new PKI service.
• Collaborate with vulnerability teams to automate cert onboarding.
• Provide technical support for Sky and Comcast users; manage certs.
• Work with App Service managed certs and Key Vault certificates.

Skills

PKI systems

ADCS monitoring

KMS management

SSH TLS SSL

RESTful APIs

Thales HSMs

Leadership

English communication

Tools

CA Administration

Job description

Sky is seeking a senior PKI/Cyber Security engineer in London to design, build, and operate PKI solutions and certificate environments. You will manage CA administration, enrolment, policy services, and monitor ADCS, while overseeing KMS for cryptographic keys and Thales HSMs.

You will onboard new PKI services, collaborate with vulnerability teams, and support PKI deployment for Sky and Comcast users, including certificate issuance and revocation.