Hays
Certificate Lifecycle Management SME - Keyfactor / Venafi
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Up to £700 per day (Inside IR35 - Umbrella) 6 months initial contract
Location: London / Hybrid (2-3 days per week on-site)
My client is an International Investment Bank who are urgently recruiting for a Certificate Lifecycle Management (CLM) Implementation Engineer / SME with strong knowledge of Keyfactor / Venafi / DigiCert / AppViewX to play a key role on a business-critical Security Programme.
The role will focus on leading the design, implementation and phased rollout of an enterprise-wide Certificate Lifecycle Management (CLM) platform across multiple business entities, while helping shape the organisation's broader PKI and cryptography strategy. Working closely with security, infrastructure, cloud and application teams, you will drive certificate automation, strengthen security controls and support the organisation's future post-quantum cryptography readiness.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Key Requirements:
- Proven experience of implementing / rolling out Certificate Lifecycle Management (CLM) platforms such as Keyfactor / Venafi / DigiCert / AppViewX.
- Expertise in at least one leading platform such as Keyfactor Command / DigiCert Trust Lifecycle Manager / Venafi TLS Protect.
- Deep knowledge of Microsoft AD CS, Certificate Authorities, X.509 certificates, CRL, OCSP and Certificate Lifecycle Management (CLM).
- Experience of automating Certificate management across Windows, Linux, cloud and ideally Kubernetes environments.
- Strong understanding of Certificate automation technologies including ACME, SCEP, EST and REST APIs.
- Experience of integrating PKI solutions with HSMs, cloud platforms, DevOps tooling and enterprise applications.
- Awareness of PQC (Post Quantum Cryptography)
- Flexible approach towards hybrid working
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Nice to have:
- Background working within a highly regulated Banking / Financial Services industry (or equivalent).
- Scripting and Automation experience using PowerShell, Python or Bash.
- Working knowledge of REST APIs, JSON, OAuth/service authentication and secure automation patterns.
- Familiarity with Infrastructure as Code (IaC) and configuration automation, Terraform / Ansible, CI/CD platforms and / or Git-based source control.
- SQL skills for reporting and data analysis for certificate inventory, ownership and risk tracking.
Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location