PKI Security Engineer - CLM, Cryptography, PQC

My client is an International Investment Bank who are urgently recruiting for a PKI Security Engineer with strong knowledge of Cryptography, Certificate Lifecycle Management (CLM) and familiarity with PQC (Post Quantum Cryptography) to play a key role on a business-critical Security Programme. The role will focus on leading the design, implementation and phased rollout of an enterprise-wide Certificate Lifecycle Management (CLM) platform across multiple business entities, while helping shape the organisation's broader PKI and cryptography strategy.

Working closely with security, infrastructure, cloud and application teams, you will drive certificate automation, strengthen security controls and support the organisation's future post-quantum cryptography readiness. Day Rate:
Up to £700 per day (Inside IR35 - Umbrella Duration : 6 months initial contract

Location:

London / Hybrid (2-3 days per week on-site)

Key Requirements:

Proven experience in PKI Security Engineering, along with implementing / rolling out Certificate Lifecycle Management (CLM) platforms such as Keyfactor / Venafi / Digi Cert / AppViewX. Expertise in at least one leading platform such as Keyfactor Command / Digi Cert Trust Lifecycle Manager / Venafi TLS Protect. Deep knowledge of Microsoft AD CS, Certificate Authorities, X.509 certificates, CRL, OCSP and Certificate Lifecycle Management (CLM).

Experience of automating Certificate management across Windows, Linux, cloud and ideally Kubernetes environments. Strong understanding of Certificate automation technologies including ACME, SCEP, EST and REST APIs.

Experience of integrating PKI solutions with HSMs, cloud platforms, Dev Ops tooling and enterprise applications. Awareness of PQC (Post Quantum Cryptography) Nice to have:
Background working within highly regulated Banking / Financial Services industry (or equivalent). Scripting and Automation experience using Power Shell, Python or Bash. Working knowledge of REST APIs, JSON, OAuth/service authentication and secure automation patterns. Familiarity with Infrastructure as Code (IaC) and configuration automation, Terraform / Ansible, CI/CD platforms and / or Git-based source control. SQL skills for reporting and data analysis for certificate inventory, ownership and risk tracking.

If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now. If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion about your career. Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers.

By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at