Xcede
PKI Architect
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
PKI Architect
6-month contract
Outside IR35
2 days a week onsite in London
We are seeking an experienced PKI Architect to lead the architectural design and delivery of a migration from on-premises Active Directory Certificate Services (AD CS) to DigiCert ONE, a SaaS-based certificate management platform. This is a like-for-like replacement of client certificate issuance and management, requiring careful planning to maintain continuity of service across a large, distributed enterprise environment with multiple member firms.
The successful candidate will operate at an architectural level, working closely with the Global Digital team, security stakeholders, and consuming member firms to design a secure, well-governed, and operationally sound certificate services environment.
Key Responsibilities
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
- Design the target-state architecture for migrating certificate services from on-premise AD CS to DigiCert ONE
- Define and document the security and Role-Based Access Control (RBAC) model for the new certificate environment
- Produce architecture and operational documentation for the Global Digital operational team
- Develop runbooks and operational guidance for consuming member firms
- Support formal customer security reviews, providing documentation and subject matter expertise as required
- Advise on certificate lifecycle management, encryption standards, and PKI best practice throughout the migration
- Work with technical and business stakeholders to ensure a smooth, low-risk transition with minimal disruption to certificate consumers
Required Skills & Experience
- Strong, demonstrable understanding of Active Directory Certificate Services (AD CS)
- Minimum 5 years' hands-on experience with enterprise-grade certificate management
- In-depth knowledge of certificates, PKI concepts, and encryption technologies
- General working knowledge of Active Directory
- Experience designing and implementing security and RBAC models
- Proven experience producing high-quality technical documentation (architecture documents, runbooks, operational guides)
- Experience supporting or participating in formal security review processes
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable Skills & Experience
- Experience with a SaaS-based certificate management platform, ideally DigiCert ONE
- Experience working within large, multi-entity or member-firm organizational structures
- Familiarity with certificate migration projects at enterprise scale
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location