We are working with a leading investment banking client based in London to secure for them a PKI Security Engineer / CLM Implementation Engineer. We are looking for a hands‑on CLM (Certificate Lifecycle Management) Implementation Engineer to lead the deployment and operationalisation of a selected CLM and Post‑Quantum Cryptography (PQC) platform.
This is an initial 6 month contract.
Paying £700 per day (Inside IR35), hybrid working (2/3 days a week in the London office).
- Senior PKI / CLM Engineer with proven hands‑on experience implementing enterprise CLM (Certificate Lifecycle Management) platforms across complex, multi‑entity environments.
- Strong PKI expertise, including Microsoft AD CS, Certificate Authorities, certificate templates, trust chains, OCSP, CRL and HSM integration.
- Experience automating certificate lifecycle management across Windows, Linux, cloud, Kubernetes, network and DevOps environments, using ACME, SCEP, EST and APIs.
- Knowledge of Post‑Quantum Cryptography (PQC), cryptographic discovery and migration planning, ideally within regulated financial services environments.
- Proven hands‑on experience implementing and managing enterprise CLM platforms.
- Strong PKI (Public Key Infrastructure) knowledge and certificate lifecycle management expertise.
- Experience with platforms such as Venafi, Keyfactor or DigiCert.
- Experience deploying and operationalising CLM solutions rather than solely administering Microsoft AD CS / Windows PKI.
Responsibilities:
- Lead the end‑to‑end implementation, configuration and deployment of the selected CLM and PQC tooling.
- Establish and operationalise certificate lifecycle management processes, replacing legacy encrypted certificates.
- Troubleshoot technical issues and act as the operational subject‑matter expert for the platform.
- Support the transition towards post‑quantum cryptographic resilience
- Integrate CLM with enterprise infrastructure, applications, cloud platforms and PKI systems, automating certificate issuance, renewal, deployment and revocation.
- Establish certificate discovery, inventory, monitoring and governance processes, identifying and remediating expired, weak, vulnerable or manually managed certificates.
- Support Post‑Quantum Cryptography (PQC) readiness, assessing cryptographic risks, developing migration plans and providing technical SME guidance across infrastructure, security and application teams.
Keywords: CLM, Certificate Lifecycle Management, PKI, Public Key Infrastructure, Post‑Quantum Cryptography (PQC), Cryptography, Crypto‑Agility, Microsoft AD CS, Venafi, Keyfactor, DigiCert, X.509 Certificates, Certificate Authorities (CA), HSM, ACME, SCEP, EST, Certificate Automation, Certificate Management, Certificate Discovery, Certificate Renewal, Certificate Revocation, TLS/SSL, Cryptographic Inventory, CBOM, Cyber Security, Infrastructure Security, Banking, Investment bank.
PKI Security Engineer / CLM Implementation Engineer in London employer: Scot Lewis Associates
As a leading UK Defence contractor, we pride ourselves on fostering a collaborative and high-performing work culture that empowers our employees to excel in their roles. Located in the vibrant areas of Malvern and Cheltenham, we offer competitive salaries, bonuses, and excellent benefits, alongside ample opportunities for professional growth and development within the National Security sector. Join us to be part of a team that values integrity, innovation, and strong customer relationships while contributing to critical projects that make a difference.
