Job Description
PKI Security Engineer/CLM Implementation Engineer | Contract | EMEA Financial ServicesI''m hiring a senior PKI engineer to lead a Certificate Lifecycle Management (CLM) rollout across EMEA entities at a major global financial institution.This is a hands-on delivery role, not BAU certificate admin. You''ll take the platform from design and pilot through production rollout and handover, and start building the groundwork for post-quantum cryptography (PQC) readiness over the next 1-3 years.What you''ll be doing:Leading the phased CLM rollout across multiple entitiesBuilding a central inventory of certificates, keys, CAs and owners, and remediating expired, orphaned or manually managed certsIntegrating CLM with AD CS, public CAs, HSMs, load balancers, cloud, Kubernetes and CI/CD pipelinesAutomating the full certificate lifecycle via ACME, SCEP, EST and APIsSupporting crypto discovery, identifying quantum-vulnerable algorithms and shaping PQC migration plansWriting HLD/LLD, runbooks and handover docs, and acting as PKI/CLM SME to security, infra, cloud and DevOps teamsWhat you''ll need:Delivered an enterprise CLM platform across multiple business units or regions (Keyfactor, DigiCert TLM, Venafi, AppViewX or similar)Strong PKI fundamentals: AD CS, root/issuing CAs, CRL/OCSP, HSM integrationCertificate automation across Windows, Linux, network, cloud and container environmentsScripting in PowerShell, Python or Bash; Terraform/Ansible a bonusRegulated financial services experience ..... full job details .....