Senior PKI Engineer

sky; Greater London; On-site; GBP 95,000 - 130,000; Full time

Benefits offered by this job

Sky Q

Sky Glass

Pension

Private healthcare

Mobile/broadband discounts

Sky VIP rewards

Job summary

Sky is seeking a senior PKI/Cyber Security engineer in London to design, build, and operate PKI solutions and certificate environments. You will manage CA administration, enrolment, policy services, and monitor ADCS, while overseeing KMS for cryptographic keys and Thales HSMs.

You will onboard new PKI services, collaborate with vulnerability teams, and support PKI deployment for Sky and Comcast users, including certificate issuance and revocation.

Qualifications

• Strong leadership across Cyber Security discipline.
• Deep knowledge of information and cyber security; familiarity with NIST, ISO27001.
• Excellent written and verbal English; additional languages a plus.
• Solid PKI knowledge: ACME, RESTful APIs; CA Administration; ADCS monitoring.
• Familiarity with data-in-motion and data-at-rest encryption.
• Expertise in PKI machine identities: SSH, TLS, SSL.
• Experience managing Key Management Systems for cryptographic keys.
• Hands-on PKI deployment and automation.
• Thales HSMs experience.

Responsibilities

• Design, build, and operate PKI solutions and environments.
• Manage CA administration, enrolment and policy services; monitor ADCS.
• Manage Key Management Systems to secure cryptographic keys.
• Support PKI deployment, automation, and Thales HSMs.
• Assess existing certificate use-cases and onboard to new PKI service.
• Collaborate with vulnerability teams to automate cert onboarding.
• Provide technical support for Sky and Comcast users; manage certs.
• Work with App Service managed certs and Key Vault certificates.

Skills

PKI systems

ADCS monitoring

KMS management

SSH TLS SSL

RESTful APIs

Thales HSMs

Leadership

English communication

Tools

CA Administration

Job description

What you'll do

• Design, build, and operate PKI solutions and environments.
• Manage Certificate Authority Administration, including Certificate Enrolment Web Service & Policy Web Service, and monitor Active Directory Certificate Services (ADCS).
• Manage Key Management Systems (KMS) to ensure robust cryptographic key security.
• You will support and manage the PKI and Certificate deployment and automation and Thales HSMs.
• Understand details of existing certificate use-cases and prepare onboarding roadmaps to the new PKI service.
• Work with Cyber vulnerability assessment teams to prioritise onboarding to automated certificate management by bringing in your technology understanding.
• Participate in the technical support of the PKI managed service for Sky as well as Comcast users, including perform certificate checks, including issuing and revoking certificates.
• Work with App Service managed certificates, private and public certificates, and certificates from Key Vault.

What you'll bring

• Technical and professional leadership across the discipline.
• A deep knowledge and understanding of Information and/or Cyber Security. Knowledge of cybersecurity principles and practices and an understanding of security frameworks e.g., NIST, ISO27001.
• Good written and verbal communication skills to liaise with stakeholders at varying levels of seniority across the business. Proficient in written and spoken English. Additional language skills will be an advantage.
• Good understanding of PKI systems and services, ACME protocol, use of RESTful APIs. With hands-on experience with Certificate Authority Administration, ADCS monitoring, and related tasks.
• Familiarity with Data-in-motion and Data-at-rest Encryption techniques.
• Expertise in PKI machine identity technologies such as SSH, SSL, TLS.
• Experience managing Key Management Systems (KMS) for cryptographic key security.
• Hands on experience with PKI and Certificate deployment and automation.
• Thales HSMs.

Team overview

Cyber Security Our products, platforms and technologies are constantly evolving that's why keeping Sky safe from cyber-attacks is one of our top priorities. Our Cyber Security team helps the business grow while protecting our customers, colleagues and partners from increasingly sophisticated cyber threats. Our team includes Cyber Fusion Centre, Security Services, Risk and Compliance, Programme Delivery and Business Security, and we work across the UK, Italy and Germany. Join us and you'll get involved in tackling challenges and future threats in an ever-changing cyber landscape.

The rewards

• Sky Q, for the TV you love all in one place
• The magic of Sky Glass at an exclusive rate
• A generous pension package
• Private healthcare
• Discounted mobile and broadband
• A wide range of Sky VIP rewards and experiences

Inclusion & how you'll work

We are a Disability Confident Employer, and welcome and encourage applications from all candidates. We will look to ensure a fair and consistent experience for all, and will make reasonable adjustments to support you where appropriate. Please flag any adjustments you need to your recruiter as early as you can.

Your office space

Brick Lane Brick Lane is in the heart of the East End of London. It's part of a vibrant and diverse community; close to street food, cafes and shops. The closest tube station is Aldgate East and Liverpool Street is about a 10 minute walk.

We’d love to hear from you

Inventive, forward-thinking minds come together to work in Tech, Product and Data at Sky. It's a place where you can explore what if, how far, and what next. But better doesn't stop at what we do, it's how we do it, too. We embrace each other's differences. We support our community and contribute to a sustainable future for our business and the planet.

If you believe in better, we'll back you all the way.

Just so you know: if your application is successful, we'll ask you to complete a criminal record check. And depending on the role you have applied for and the nature of any convictions you may have, we might have to withdraw the offer.