Certificate Lifecycle Management SME - Keyfactor​/Venafi

Position: Certificate Lifecycle Management SME - Keyfactor / Venafi
Up to £700 per day (Inside IR35 - Umbrella)6 months initial contract London / Hybrid (2-3 days per week on-site) My client is an International Investment Bank who are urgently recruiting for a Certificate Lifecycle Management (CLM) Implementation Engineer / SME with strong knowledge of Keyfactor / Venafi / Digi Cert / AppViewX to play a key role on a business-critical Security Programme.

The role will focus on leading the design, implementation and phased rollout of an enterprise-wide Certificate Lifecycle Management (CLM) platform across multiple business entities, while helping shape the organisation's broader PKI and cryptography strategy. Working closely with security, infrastructure, cloud and application teams, you will drive certificate automation, strengthen security controls and support the organisation's future post-quantum cryptography readiness. Key Requirements :
Proven experience of implementing / rolling out Certificate Lifecycle Management (CLM) platforms such as Keyfactor / Venafi / Digi Cert / AppViewX. Expertise in at least one leading platform such as Keyfactor Command / Digi Cert Trust Lifecycle Manager / Venafi TLS Protect. Deep knowledge of Microsoft AD CS, Certificate Authorities, X.509 certificates, CRL, OCSP and Certificate Lifecycle Management (CLM).

Experience of automating Certificate management across Windows, Linux, cloud and ideally Kubernetes environments. Strong understanding of Certificate automation technologies including ACME, SCEP, EST and REST APIs.

Experience of integrating PKI solutions with HSMs, cloud platforms, Dev Ops tooling and enterprise applications. Awareness of PQC (Post Quantum Cryptography) Flexible approach towards hybrid working Nice to have:
Background working within a highly regulated Banking / Financial Services industry (or equivalent). Scripting and Automation experience using Power Shell, Python or Bash. Working knowledge of REST APIs, JSON, OAuth/service authentication and secure automation patterns. Familiarity with Infrastructure as Code (IaC) and configuration automation, Terraform / Ansible, CI/CD platforms and / or Git-based source control. SQL skills for reporting and data analysis for certificate inventory, ownership and risk tracking.

Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at