Senior PKI Engineer

Sky UK; Greater London; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Sky Q access

Sky Glass discount

Broadband discount

Sky VIP rewards

Job summary

Sky UK is seeking an experienced PKI Security Engineer to design, build and operate PKI solutions and CA administration across Sky and partner services. You will monitor ADCS, manage Key Management Systems, and support deployment automation with Thales HSMs.

The role requires hands-on PKI expertise, strong security knowledge, and excellent communication to liaise with stakeholders at all levels. Hybrid working from London offices is offered.

Qualifications

• Deep knowledge of Information and/or Cyber Security and security frameworks (NIST, ISO27001).
• Hands-on PKI systems experience including CA administration and ADCS monitoring.
• Experience with encryption techniques for data in motion and at rest.
• Strong written and spoken English with ability to liaise across seniority levels.

Responsibilities

• Design, build, and operate PKI solutions and environments.
• Manage CA administration, Certificate Enrolment Web Service & Policy Web Service.
• Monitor ADCS and ensure secure key management with KMS.
• Support and manage PKI deployment, automation, and Thales HSMs.
• Onboard new PKI service and develop roadmaps for onboarding.
• Collaborate with vulnerability teams to prioritize automated certificate management.
• Provide technical support for Sky and Comcast users, including certificate issuance/revocation.
• Work with App Service managed certificates and Key Vault certificates.

Skills

PKI expertise

ADCS monitoring

HSM management

RESTful APIs

Tools

Thales HSMs

Key Vault

ACME protocol

Job description

We believe in better. And we make it happen.

Better content. Better products. And better careers.

Working in Tech, Product or Data at Sky is about building the next and the new. From broadband to broadcast, streaming to mobile, SkyQ to Sky Glass, we never stand still. We optimise and innovate.

We turn big ideas into the products, content and services millions of people love.

And we do it all right here at Sky.

What you'll do

Design, build, and operate PKI solutions and environments.

Manage Certificate Authority Administration, including Certificate Enrolment Web Service & Policy Web Service, and monitor Active Directory Certificate Services (ADCS)

Manage Key Management Systems (KMS) to ensure robust cryptographic key security.

You will support and manage the PKI and Certificate deployment and automation and Thales HSMs

Understand details of existing certificate use-cases and prepare onboarding roadmaps to the new PKI service.

Work with Cyber vulnerability assessment teams to prioritise onboarding to automated certificate management by bringing in your technology understanding.

Participate in the technical support of the PKI managed service for Sky as well as Comcast users, including perform certificate checks, including issuing and revoking certificates.

Work with App Service managed certificates, private and public certificates, and certificates from Key Vault

What you'll bring

Technical and professional leadership across the discipline.

A deep knowledge and understanding of Information and/or Cyber Security. Knowledge of cybersecurity principles and practices and an understanding of security frameworks e.g., NIST, ISO27001

Good written and verbal communication skills to liaise with stakeholders at varying levels of seniority across the business. Proficient in written and spoken English. Additional language skills will be an advantage.

Good understanding of PKI systems and services, ACME protocol, use of RESTful APIs. With hands-on experience with Certificate Authority Administration, ADCS monitoring, and related tasks

Familiarity with Data-in-motion and Data-at-rest Encryption techniques

Expertise in PKI machine identity technologies such as SSH, SSL, TLS

Experience managing Key Management Systems (KMS) for cryptographic key security.

Hands on experience with:

PKI and Certificate deployment and automation.

Thales HSMs

Team overview

Cyber Security

Our products, platforms and technologies are constantly evolving that’s why keeping Sky safe from cyber-attacks is one of our top priorities. Our Cyber Security team helps the business grow while protecting our customers, colleagues and partners from increasingly sophisticated cyber threats. Our team includes Cyber Fusion Centre, Security Services, Risk and Compliance, Programme Delivery and Business Security, and we work across the UK, Italy and Germany. Join us and you’ll get involved in tackling challenges and future threats in an ever‑changing cyber landscape.

The rewards

There's one thing people can't stop talking about when it comes to #LifeAtSky: the perks. Here’s a taster:

Sky Q, for the TV you love all in one place

The magic of Sky Glass at an exclusive rate

Discounted mobile and broadband

A wide range of Sky VIP rewards and experiences

Inclusion & how you'll work

We are a Disability Confident Employer, and welcome and encourage applications from all candidates. We will look to ensure a fair and consistent experience for all, and will make reasonable adjustments to support you where appropriate. Please flag any adjustments you need to your recruiter as early as you can.

We’ve embraced hybrid working and split our time between unique office spaces and the convenience of working from home. You’ll find out more about what hybrid working looks like for your role later on in the recruitment process.

Your office space

Brick Lane

Brick Lane is in the heart of the East End of London. It's part of a vibrant and diverse community; close to street food, cafes and shops. The closest tube station is Aldgate East and Liverpool Street is about a 10 minute walk.

We'd love to hear from you

Inventive, forward-thinking minds come together to work in Tech, Product and Data at Sky. It’s a place where you can explore what if, how far, and what next.

But better doesn’t stop at what we do, it’s how we do it, too. We embrace each other’s differences. We support our community and contribute to a sustainable future for our business and the planet.

If you believe in better, we’ll back you all the way.

Just so you know: if your application is successful, we’ll ask you to complete a criminal record check. And depending on the role you have applied for and the nature of any convictions you may have, we might have to withdraw the offer.

Life at Sky

There’s more to our work than work. We’ve built an inclusive culture where we can learn from each other and innovate together. There’s plenty of opportunities for you to explore what you’re passionate about.