PKI Infrastructure Engineer – Certificates, Directory and Card Management

• Install, configure and maintain the organisation-wide public key infrastructure and its virtualised, networking and hardware components
• Run the directory service, supporting web service and dedicated databases
• Own certificate status checking and time stamping
• Deploy, integrate and manage the card management system
• Support smart card enrolment and certificate issuance
• Manage hardware security modules, including firmware upgrades
• Analyse certificate authority logs, troubleshoot alarms and errors, and monitor suspicious activity
• Maintain daily operations, backup and restore, and validate restorations
• Provide second- and third-line technical support to operating authorities and service customers
• Design new components and write standard operating procedures
• Document new services and prepare installation guides, configuration baselines, test plans, reports and hardening guides
• Investigate network faults, security incidents and performance problems and implement improvements
• Integrate security tooling into current and future environments
• Run testing, validation and acceptance activities
• Work with project managers, engineers, architects and operational stakeholders
• Hand over services to operations and provide knowledge transfer

Requirements

• At least five years in cyber security or a closely related field
• Deep knowledge of modern networking and internet protocols, including their security
• Working competence configuring routers and switches
• Hands‑on administration of Windows Server, Red Hat Enterprise Linux and VMware
• Experience with backup and restore
• Practical scripting in Python and PowerShell
• Automation with Ansible
• Familiarity with SSL, TLS and OpenSSL
• SQL database administration experience
• Five years or more across network installation, testing and integration; network support and performance monitoring; migration projects; and fault diagnosis to agreed procedures
• Configuration, maintenance and repair of storage networks, servers, tape libraries and virtualisation platforms
• Experience with systems installation and decommissioning, quality plans and method statements, integration builds and test specifications, configuration management and problem management
• Recent work with Juniper, Palo Alto and RSA NetWitness
• Experience designing and configuring infrastructure elements inside projects, including routing, switching and virtualisation
• Record of delivering into industry, government or military organisations, including deployments to operational areas
• Ability to work alone or coordinate an industry team
• Strong professional English, written and spoken
• Genuine technical writing ability
• Willingness to work outside office hours when required
• Nice to have: experience supporting a military or governmental organisation
• Security clearance is required, as indicated in the job title

Core Competencies

Demonstrates expertise in managing public key infrastructure, including certificate issuance and smart card enrolment, while ensuring robust security through network protocols and systems administration. Proficient in technical documentation, troubleshooting, and providing high-level support in cyber security environments.

Highest-signal resume keywords

• Public Key Infrastructure Management
• Windows Server Administration
• Python Scripting
• Network Security Protocols
• Security Clearance

Hard Skills

• Network Installation
• SQL Database Administration
• Router Configuration
• Switch Configuration
• Backup and Restore
• Ansible Automation
• Red Hat Enterprise Linux Administration
• VMware Administration
• SSL/TLS Management
• Fault Diagnosis

Soft Skills

• Technical Writing
• Communication Skills
• Team Coordination
• Problem Solving
• Ability to Work Independently

Industry Keywords

• Cyber Security
• Governmental Organisation Experience
• Military Organisation Experience
• Operational Area Deployments
• Network Performance Monitoring

Tools & Technologies

• Juniper
• Palo Alto
• RSA NetWitness
• Virtualisation Platforms
• Storage Networks