DevOps/Cloud PKI Engineer

We believe in better. And we make it happen. Better content. Better products. And better careers. Working in Tech, Product or Data at Sky is about building the next and the new. From broadband to broadcast, streaming to mobile, SkyQ to Sky Glass, we never stand still. We optimise and innovate. We turn big ideas into the products, content and services millions of people love. And we do it all right here at Sky.

What you'll do

• Design, build, and operate PKI solutions and environments.
• Manage Certificate Authority Administration, including Certificate Enrolment Web Service & Policy Web Service, and monitor Active Directory Certificate Services (ADCS).
• Manage Key Management Systems (KMS) to ensure robust cryptographic key security.
• Support and manage the PKI and Certificate deployment and automation and Thales HSMs.
• Understand details of existing certificate use-cases and prepare onboarding roadmaps to the new PKI service.
• Work with Cyber vulnerability assessment teams to prioritise onboarding to automated certificate management by bringing in your technology understanding.
• Participate in the technical support of the PKI managed service for Sky as well as Comcast users, including performing certificate checks, including issuing and revoking certificates.
• Work with App Service managed certificates, private and public certificates, and certificates from Key Vault.

What you'll bring

• Technical and professional leadership across the discipline.
• A deep knowledge and understanding of Information and/or Cyber Security.
• Knowledge of cybersecurity principles and practices and an understanding of security frameworks e.g., NIST, ISO27001.
• Good written and verbal communication skills to liaise with stakeholders at varying levels of seniority across the business.
• Proficient in written and spoken English. Additional language skills will be an advantage.
• Excellent understanding of the AWS Cloud Infrastructure, hands-on Terraform skills, proficient in Python, AWS Concourse, Lambda and ability to build a proxy.
• Background in Cloud DevOps.
• An understanding of PKI systems and services, ACME protocol, use of RESTful APIs.
• Hands-on experience with Certificate Authority Administration, ADCS monitoring, and related tasks.
• Familiarity with Data-in-motion and Data-at-rest Encryption techniques.
• An understanding of PKI machine identity technologies such as SSH, SSL, TLS.
• Experience managing Key Management Systems (KMS) for cryptographic key security.
• It would be beneficial to have hands-on experience with PKI and Certificate deployment and automation.
• Thales HSMs.

Team overview

Cyber Security: Our products, platforms and technologies are constantly evolving that's why keeping Sky safe from cyber-attacks is one of our top priorities. Our Cyber Security team helps the business grow while protecting our customers, colleagues and partners from increasingly sophisticated cyber threats. Our team includes Cyber Fusion Centre, Security Services, Risk and Compliance, Programme Delivery and Business Security, and we work across the UK, Italy and Germany. Join us and you'll get involved in tackling challenges and future threats in an ever-changing cyber landscape.

The rewards

There's one thing people can't stop talking about when it comes to #LifeAtSky: the perks. Here's a taster: Sky Q, for the TV you love all in one place; The magic of Sky Glass at an exclusive rate; A generous pension package; Private healthcare; Discounted mobile and broadband; A wide range of Sky VIP rewards and experiences.

Inclusion & how you'll work

We are a Disability Confident Employer, and welcome and encourage applications from all candidates. We will look to ensure a fair and consistent experience for all, and will make reasonable adjustments to support you where appropriate. Please flag any adjustments you need to your recruiter as early as you can. We've embraced hybrid working and split our time between unique office spaces and the convenience of working from home. You'll find out more about what hybrid working looks like for your role later on in the recruitment process.

Your office space

Brick Lane: Brick Lane is in the heart of the East End of London. It's part of a vibrant and diverse community; close to street food, cafes and shops. The closest tube station is Aldgate East and Liverpool Street is about a 10 minute walk. Osterley: Our Osterley Campus is a 10-minute walk from Syon Lane train station. Or you can hop on one of our free shuttle buses that run to and from Osterley, Gunnersbury, Ealing Broadway and South Ealing tube stations. There are also plenty of bike shelters and showers. On campus, you'll find 13 subsidised restaurants, cafes, and a Waitrose. You can keep in shape at our subsidised gym, catch the latest shows and movies at our cinema, get your car washed, and even get pampered at our beauty salon.

We'd love to hear from you. Inventive, forward-thinking minds come together to work in Tech, Product and Data at Sky. It's a place where you can explore what if, how far, and what next. But better doesn't stop at what we do, it's how we do it, too. We embrace each other's differences. We support our community and contribute to a sustainable future for our business and the planet. If you believe in better, we'll back you all the way.

Just so you know: if your application is successful, we'll ask you to complete a criminal record check. And depending on the role you have applied for and the nature of any convictions you may have, we might have to withdraw the offer.