At a Glance
- Tasks: Lead the design and rollout of a Certificate Lifecycle Management platform in a dynamic financial environment.
- Company: Join a leading financial services organisation with a focus on innovation and security.
- Benefits: Competitive daily rate, hybrid work model, and opportunities for professional growth.
- Other info: Exciting opportunity to shape the future of cryptographic security across EMEA.
- Why this job: Make a significant impact on security practices while working with cutting-edge technologies.
- Qualifications: Extensive PKI/CLM experience and strong technical skills in complex environments.
- Security Engineer – PKI/CLM Implementation
- Inside IR35 – Up to GBP700 per day
- Hybrid in Central London
- 6–Month Initial Contract
The role
A leading financial services organisation is looking for a senior, hands–on PKI Security Engineer to lead the design, implementation and phased rollout of a Certificate Lifecycle Management (CLM) platform across its EMEA entities.
You'll set up automated certificate discovery and lifecycle controls, integrate the platform with the enterprise PKI estate, and support post–quantum cryptography (PQC) risk assessment and remediation over the next 1 to 3 years.
Key responsibilities
- Lead the CLM rollout from design and pilot through to production and operational handover.
- Build and maintain a central inventory of certificates, keys, trust stores, CAs, owners and dependencies.
- Integrate CLM with Microsoft AD CS, public CAs, HSMs, load balancers, network devices, servers, cloud, Kubernetes and Dev Ops pipelines.
- Automate the certificate lifecycle (request through to decommissioning) using ACME, SCEP, EST, APIs and agents.
- Design the CLM architecture, RBAC, security controls and operating processes in line with change governance.
- Plan onboarding waves with stakeholders, and remediate orphaned, expired, weak or manually managed certificates.
- Define monitoring, alerting, dashboards, audit evidence and KPIs/KRIs.
- Support cryptographic discovery for PQC, identify quantum–vulnerable algorithms and help shape migration plans.
- Produce HLDs, LLDs, runbooks and handover documentation, and act as PKI/CLM SME for teams across EMEA.
Essential experience
- Substantial hands–on PKI/CLM implementation in complex enterprise environments, beyond BAU certificate administration.
- Proven delivery of an enterprise CLM platform across multiple business units, entities or regions.
- Strong PKI knowledge: root and issuing CAs, Microsoft AD CS, templates, CRL, OCSP, trust chains and HSM integration.
- Certificate lifecycle automation across Windows, Linux, network, cloud, container and Dev Ops environments.
- Experience with at least one leading CLM product (Keyfactor Command, Digi Cert Trust Lifecycle Manager, Venafi, App View X or equivalent).
- Knowledge of X.509, TLS/m TLS, PKCS standards and key stores, with ACME, SCEP, EST and REST API integration.
- Working knowledge of crypto–agility, cryptographic inventory and PQC migration planning (NIST standards).
- Experience in regulated financial services or similarly controlled environments.
- Infrastructure and cloud skills
Active Directory, Entra ID, Windows Server, Linux and Open SSL; Azure, AWS and GCP key management; Kubernetes and cert–manager; CI/CD and Git workflows; HSMs, KMS and secrets management.
- Highly desired
- Scripting in Power Shell, Python and Bash, plus Terraform or Ansible.
- CLM vendor certification, and AD CS expertise (such as Windows Server Hybrid Administrator).
- CISSP, CCSP, CISM or SABSA, and cloud or Kubernetes certification (CKA, CKS)
Security Engineer - PKI/CLM Implementation - Inside IR35 - Up to ?700 in London employer: Hunter Bond
Join our leading bank, where we prioritise employee growth and a collaborative work culture. As a KYC CLM AVP in London, you'll benefit from flexible working options and the chance to lead a dynamic team in a high-growth area, driving meaningful improvements in client experience and operational efficiency. We are committed to fostering an environment that encourages innovation and professional development, making us an excellent employer for those seeking a rewarding career in banking.
StudySmarter Expert Advice🤫
We think this is how you could land Security Engineer - PKI/CLM Implementation - Inside IR35 - Up to ?700 in London
✨Get Engaged in Cybersecurity Communities
Dive into online forums or local meetups, like OWASP events or Cybersecurity conferences. These spaces are packed with pros who can share insights and might even know about temporary roles at places like Hunter Bond.
✨Showcase Your Skills Publicly
Link your GitHub or create a series of blogs sharing your knowledge on cybersecurity topics. It’s a great way to demonstrate your expertise and attract attention from hiring managers, especially when they see your passion in action.
✨Stay On Top of Temp Opportunities
Keep an eye on platforms that list temporary positions specifically in tech. Websites focusing on contract roles in cybersecurity can lead straight to employers like Hunter Bond.
✨Make Contact with Recruiters Specialising in Cybersecurity
Reach out to recruitment agencies that focus on cybersecurity roles. They often have insights into temporary roles before they’re advertised and can put your name forward to companies like Hunter Bond.
We think you need these skills to ace Security Engineer - PKI/CLM Implementation - Inside IR35 - Up to ?700 in London
Some tips for your application 🫡
Show Off Your Technical Skills:In cybersecurity, it's vital to highlight your skills with relevant tools and technologies. Make sure your CV showcases your experience with firewalls, intrusion detection systems, and any cybersecurity frameworks you've worked with. This gives Hunter Bond a clear view of your capabilities right off the bat.
Certifications Matter:If you’ve got any cybersecurity certifications, like CompTIA Security+ or CISSP, flaunt them! These not only validate your skills but also show that you’re committed to the field. Add a section to your CV specifically for this, because in a temporary role like this, those credentials can really set you apart.
Tailor Your Cover Letter to the Role:For a temporary position, we want to see your willingness to learn and adapt quickly. Make your cover letter specific to the role at Hunter Bond; mention why you’re excited about the opportunity and how it fits your career goals. A personal touch can make a big difference!
Don’t Forget the Soft Skills:In cybersecurity, technical skills are crucial, but so are soft skills like teamwork and communication. Make sure to weave examples of how you've collaborated with teams or communicated complex ideas into your application. This shows that you're not just a tech whizz but also a great team player, perfect for a temporary role at Hunter Bond.
How to prepare for a job interview at Hunter Bond
✨Brush Up on Technical Skills
Make sure you’re familiar with the latest cybersecurity tools and techniques, like firewalls, intrusion detection systems, and malware analysis. During the interview with Hunter Bond for the Security Engineer - PKI/CLM Implementation - Inside IR35 - Up to ?700, be prepared to discuss specific scenarios where you tackled security threats or vulnerabilities.
✨Show Your Problem-Solving Prowess
Cybersecurity is all about thinking on your feet. Expect technical questions that require you to demonstrate your problem-solving abilities. You might be presented with a mock security breach scenario, so practising your responses to potential threats can be a game changer!
✨Demonstrate Your Adaptability
As this is a temporary role, showing that you're adaptable and quick to learn is crucial. Talk about times you've picked up new skills or reacted to changing situations quickly. Employers want to know you can hit the ground running and keep things secure during your short stay at Hunter Bond.
✨Bring Relevant Certifications
If you have any relevant cybersecurity certifications, like CompTIA Security+ or CEH, be sure to mention them. This can really help you stand out during a temporary hiring process, as it showcases your commitment to the field and your readiness to take on the Security Engineer - PKI/CLM Implementation - Inside IR35 - Up to ?700 role at Hunter Bond.
