Senior PKI Engineer – Certificate Authorities, HSMs, Smart Cards

pul liInstall, configure and maintain the organisation-wide public key infrastructure and its virtualised platform, networking and hardware /li liRun the directory service, supporting web service and dedicated databases /li liOwn certificate status checking and time stamping /li liDeploy, integrate and manage the card management system /li liSupport smart card enrolment and certificate issuance /li liManage hardware security modules, including firmware upgrades /li liAnalyse certificate authority logs, troubleshoot alarms and errors, and monitor suspicious activity /li liMaintain daily operations, backup and restore, and verify restores /li liProvide second
- and third-line technical support to operating authorities and service customers /li liDesign new components and write standard operating procedures and service documentation /li liInvestigate network faults, security incidents and performance problems and implement improvements /li liSupport integration of security tooling into current and future environments /li liRun testing, validation and acceptance activities /li liWrite installation guides, configuration baselines, test plans and reports, and hardening guides /li liWork with project managers, engineers, architects and operational stakeholders /li liTransfer knowledge to operations during handovers /li liWork outside office hours when incidents or operational requirements require it /li /ul h3Requirements /h3 ul liAt least five years in cyber security or a closely related field /li liExperience building security architecture, delivering security capabilities, or running demanding technical estates /li liDeep knowledge of modern networking and internet protocols, including their security /li liWorking competence configuring routers and switches /li liHands-on administration of Windows Server, Red Hat Enterprise Linux and VMware /li liExperience with backup and restore /li liPractical scripting in Python and PowerShell /li liAutomation with Ansible /li liFamiliarity with SSL, TLS and OpenSSL /li liSQL database administration experience /li liFive years or more across network installation, testing and integration; network support and performance monitoring; migration projects; and fault diagnosis to agreed procedures /li liExperience configuring, maintaining and repairing storage networks, servers, tape libraries and virtualisation platforms /li liExperience with systems installation and decommissioning, quality plans and method statements, integration builds and test specifications, configuration management and problem management /li liRecent work with Juniper, Palo Alto and RSA NetWitness /li liExperience designing and configuring infrastructure elements inside projects, including routing, switching and virtualisation /li liRecord of delivering into industry, government or military organisations, including deployments to operational areas /li liAbility to work alone or coordinate an industry team /li liStrong professional English, written and spoken /li liGenuine technical writing ability /li liSecurity clearance required, as indicated by the role title /li liExperience supporting a military or governmental organisation is nice to have /li /ul h3Core Competencies /h3 pDemonstrates expertise in managing public key infrastructure, including certificate issuance and smart card enrolment, while ensuring robust security architecture and network performance. Proficient in technical support, documentation, and automation using scripting languages and tools. /p h3Highest-signal resume keywords /h3 ul liPublic Key Infrastructure Management /li liCyber Security Expertise /li liWindows Server Administration /li liPython Scripting /li liNetwork Configuration and Support /li /ul h3ATS Optimization Keywords /h3 h3Hard Skills /h3 ul liCertificate Issuance /li liSmart Card Enrolment /li liNetwork Protocols Security /li liSQL Database Administration /liliAnsible Automation /li liRouter and Switch Configuration /li liWindows Server Administration /li liRed Hat Enterprise Linux Administration /li liVMware Administration /li liBackup and Restore /li /ul h3Soft Skills /h3 ul liTechnical Writing /li liCommunication Skills /li liTeam Coordination /li /ul h3Certifications Qualifications /h3 ul liSecurity Clearance /li /ul h3Industry Keywords /h3 ul liCyber Security /li liGovernment /li liMilitary /li liNetwork Installation /li liFault Diagnosis /li /ul h3Tools Technologies /h3 ul liJuniper /li liPalo Alto /li liRSA NetWitness /li liOpenSSL /li liVirtualisation Platforms /li /ul /p