How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Enterprise PKI Architect / PKI Specialist
London (Hybrid) | Fixed-Term Contract | Competitive Package
We're partnering with a highly respected global organisation seeking an experienced Enterprise PKI Specialist to lead the design, delivery, and evolution of its Public Key Infrastructure (PKI) capabilities. This is a rare opportunity for a senior PKI professional to take ownership of a large-scale enterprise PKI environment, influencing strategy, architecture, governance, and operational delivery across a complex technology estate spanning on-premises and cloud platforms.
The Opportunity
As the organisation's PKI Subject Matter Expert, you will be responsible for defining and implementing enterprise PKI architecture, establishing best practices for machine identity management, and ensuring the long-term resilience, security, and scalability of cryptographic services. You will work closely with security, infrastructure, cloud, engineering, and architecture teams, providing technical leadership on all PKI-related initiatives and helping shape the future direction of the organisation's trust services.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Key Responsibilities
- Design and deliver enterprise-grade PKI architecture and operational frameworks
- Develop Root CA, Intermediate CA, and Issuing CA hierarchies
- Define certificate policies, standards, trust models, and governance controls
- Lead PKI modernisation, migration, and transformation initiatives
- Design highly available and resilient PKI services
- Oversee HSM integration, key management, and cryptographic controls
- Establish automated certificate lifecycle management processes
- Develop enterprise machine identity management capabilities
- Define certificate discovery, monitoring, reporting, and inventory standards
- Provide expert guidance to engineering, cloud, infrastructure, and security teams
- Support audit, compliance, and regulatory requirements
- Act as the organisation's senior PKI authority and trusted advisor
What We're Looking For
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- Extensive experience designing and implementing enterprise PKI environments
- Strong expertise in Root CA, Intermediate CA, and Issuing CA architecture
- Deep understanding of X.509 certificates, PKI trust models, certificate lifecycle management, CRLs, OCSP, and certificate validation
- Experience operating HSM-backed PKI environments
- Proven track record delivering PKI transformation or modernisation programmes
- Strong stakeholder management and communication skills
- Ability to translate complex technical concepts into practical business recommendations
Desirable Experience
- Venafi, Keyfactor, DigiCert Trust Lifecycle Manager, Sectigo, EJBCA, HashiCorp Vault, or similar platforms
- Microsoft AD CS architecture, migration, and transformation projects
- AWS, Azure, Kubernetes, and hybrid cloud environments
- Experience within highly regulated or enterprise-scale environments
- Relevant security, architecture, cloud, or cryptography certifications
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location