Security Engineer - PKI/CLM Implementation - Inside IR35 - Up to £700 per day

Security Engineer - PKI/CLM Implementation Inside IR35 - Up to £700 per day Hybrid in Central London 6-Month Initial Contract The role A leading financial services organisation is looking for a senior, hands-on PKI Security Engineer to lead the design, implementation and phased rollout of a Certificate Lifecycle Management (CLM) platform across its EMEA entities. You''ll set up automated certificate discovery and life cycle controls, integrate the platform with the enterprise PKI estate, and support post-quantum cryptography (PQC) risk assessment and remediation over the next 1 to 3 years. Key responsibilities Lead the CLM rollout from design and pilot through to production and operational handover. Build and maintain a central inventory of certificates, keys, trust stores, CAs, owners and dependencies. Integrate CLM with Microsoft AD CS, public CAs, HSMs, load balancers, network devices, Servers, cloud, Kubernetes and DevOps pipelines. Automate the certificate life cycle (request through to decommissioning) using ACME, SCEP, EST, APIs and agents. Design the CLM architecture, RBAC, security controls and operating processes in line with change governance. Plan onboarding waves with stakeholders, and remediate orphaned, expired, weak or manually managed certificates. Define monitoring, alerting, dashboards, audit evidence and KPIs/KRIs. Support cryptographic discovery for PQC, identify quantum-vulnerable algorithms and help shape migration plans. Produce HLDs, LLDs, ..... full job details .....