Job Description PKI Security Engineer/CLM Implementation Engineer | Contract | EMEA Financial Services \n \n \nI'm hiring a senior PKI engineer to lead a Certificate Lifecycle Management (CLM) rollout across EMEA entities at a major global financial institution.\n \n \nThis is a hands-on delivery role, not BAU certificate admin. You'll take the platform from design and pilot through production rollout and handover, and start building the groundwork for post-quantum cryptography (PQC) readiness over the next 1-3 years.\n \n \nWhat you'll be doing:\n \n \n Leading the phased CLM rollout across multiple entities \n Building a central inventory of certificates, keys, CAs and owners, and remediating expired, orphaned or manually managed certs \n Integrating CLM with AD CS, public CAs, HSMs, load balancers, cloud, Kubernetes and CI/CD pipelines \n Automating the full certificate lifecycle via ACME, SCEP, EST and APIs \n Supporting crypto discovery, identifying quantum-vulnerable algorithms and shaping PQC migration plans \n Writing HLD/LLD, runbooks and handover docs, and acting as PKI/CLM SME to security, infra, cloud and DevOps teams \n \n \nWhat you'll need:\n \n \n Delivered an enterprise CLM platform across multiple business units or regions (Keyfactor, DigiCert TLM, Venafi, AppViewX or similar) \n Strong PKI fundamentals: AD CS, root/issuing CAs, CRL/OCSP, HSM integration \n Certificate automation across Windows, Linux, network, cloud and container environments \n Scripting in PowerShell, Python or Bash; Terraform/Ansible a bonus \n Regulated financial services experience (audit, change control, segregation of duties) \n Working knowledge of crypto-agility, CBOM and NIST PQC standards \n Vendor CLM certification is strongly preferred; CISSP/CCSP/SABSA is a plus \n \n \nLocation: London\n \nRate: £600 - £700 P/D (inside IR 35)\n \nDuration: Initial 6 Months\n \n \nInterested, or know someone who'd be a fit? Drop me a message or comment below.\n \n PKI Security Engineer/CLM Implementation Engineer | Contract | EMEA Financial Services
PKI Security Engineer in Liverpool employer: IntecSelect
Join a leading consultancy in Kent as a Modern Workplace Engineer, where you'll be part of a dynamic and highly technical team dedicated to delivering innovative cloud-first solutions. With a strong focus on employee growth, this role offers the opportunity to transition into a Modern Work consultant while enjoying a supportive work culture that values hands-on expertise and collaboration. Benefit from competitive pay, flexible onsite arrangements, and a commitment to professional development in a transformative environment.
