Senior PKI Engineer – Certificate Authorities, HSMs, Smart Cards

• Install, configure and maintain the organisation-wide public key infrastructure and its virtualised platform, networking and hardware
• Run the directory service, supporting web service and dedicated databases
• Own certificate status checking and time stamping
• Deploy, integrate and manage the card management system
• Support smart card enrolment and certificate issuance
• Manage hardware security modules, including firmware upgrades
• Analyse certificate authority logs, troubleshoot alarms and errors, and monitor suspicious activity
• Maintain daily operations, backup and restore, and verify restores
• Provide second- and third-line technical support to operating authorities and service customers
• Design new components and write standard operating procedures and service documentation
• Investigate network faults, security incidents and performance problems and implement improvements
• Support integration of security tooling into current and future environments
• Run testing, validation and acceptance activities
• Write installation guides, configuration baselines, test plans and reports, and hardening guides
• Work with project managers, engineers, architects and operational stakeholders
• Transfer knowledge to operations during handovers
• Work outside office hours when incidents or operational requirements require it

Requirements

• At least five years in cyber security or a closely related field
• Experience building security architecture, delivering security capabilities, or running demanding technical estates
• Deep knowledge of modern networking and internet protocols, including their security
• Working competence configuring routers and switches
• Hands-on administration of Windows Server, Red Hat Enterprise Linux and VMware
• Experience with backup and restore
• Practical scripting in Python and PowerShell
• Automation with Ansible
• Familiarity with SSL, TLS and OpenSSL
• SQL database administration experience
• Five years or more across network installation, testing and integration; network support and performance monitoring; migration projects; and fault diagnosis to agreed procedures
• Experience configuring, maintaining and repairing storage networks, servers, tape libraries and virtualisation platforms
• Experience with systems installation and decommissioning, quality plans and method statements, integration builds and test specifications, configuration management and problem management
• Recent work with Juniper, Palo Alto and RSA NetWitness
• Experience designing and configuring infrastructure elements inside projects, including routing, switching and virtualisation
• Record of delivering into industry, government or military organisations, including deployments to operational areas
• Ability to work alone or coordinate an industry team
• Strong professional English, written and spoken
• Genuine technical writing ability
• Security clearance required, as indicated by the role title
• Experience supporting a military or governmental organisation is nice to have

Core Competencies

Demonstrates expertise in managing public key infrastructure, including certificate issuance and smart card enrolment, while ensuring robust security architecture and network performance. Proficient in technical support, documentation, and automation using scripting languages and tools.

Highest-signal resume keywords

• Public Key Infrastructure Management
• Cyber Security Expertise
• Windows Server Administration
• Python Scripting
• Network Configuration and Support

ATS Optimization Keywords

Hard Skills

• Certificate Issuance
• Smart Card Enrolment
• Network Protocols Security
• SQL Database Administration
• Ansible Automation
• Router and Switch Configuration
• Windows Server Administration
• Red Hat Enterprise Linux Administration
• VMware Administration
• Backup and Restore

Soft Skills

• Technical Writing
• Communication Skills
• Team Coordination

Certifications & Qualifications

• Security Clearance

Industry Keywords

• Cyber Security
• Government
• Military
• Network Installation
• Fault Diagnosis

Tools & Technologies

• Juniper
• Palo Alto
• RSA NetWitness
• OpenSSL
• Virtualisation Platforms