Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 31 hours ago

Enterprise PKI Specialist (Contractor)

Qube Research & Technologies198 open roles

Where
London
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowEnterprise PKI Specialist (Contractor)Qube Research & Technologies · London

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Qube Research & Technologies's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

9.5% of postings close within 7 days. Measured by our own scanner across the market. Qube Research & Technologies postings stay open a median of 11 days.

Share of postings closed within
  1. 1.8%1 day
  2. 3.9%3 days
  3. 9.5%7 days
  4. 15.5%14 days
  5. 33.9%30 days
This job: posted 31 hours ago

Qube Research & Technologies median: 11 days open

The posting

Enterprise PKI Specialist (Fixed Term Contract)

The Enterprise PKI Specialist is a senior technical specialist responsible for the design, implementation, governance, and evolution of Public Key Infrastructure (PKI) services across Qube Research & Technologies (QRT).

The successful candidate will serve as the organisation's primary PKI subject matter expert, providing strategic guidance, architectural leadership, hands-on engineering expertise, and technical governance across all PKI-related initiatives.

This is a highly specialised role requiring extensive experience designing, building, and modernising PKI environments within large enterprises. The successful candidate will have a proven track record of delivering PKI programmes from initial requirements gathering and architecture design through to implementation, operationalisation, and long-term governance.

PKI Architecture & Delivery

  • Design and deliver enterprise grade PKI architecture and supporting operational model.
  • Design and implement root and issuing Certificate Authority (CA) hierarchies.
  • Define certificate policies, certificate profiles, naming standards, trust models, and operational controls.
  • Design resilient, highly available PKI infrastructure and supporting services.
  • Lead the implementation and migration of PKI platforms, tooling, and supporting infrastructure.
  • Define disaster recovery, backup, recovery, and key protection requirements for PKI services.
  • Design and oversee Hardware Security Module (HSM) integration and key management processes.
  • Establish operational procedures for certificate issuance, renewal, revocation, recovery, and lifecycle management.
  • Ensure solutions are scalable, supportable, and aligned with security and regulatory requirements.

PKI Subject Matter Expertise

  • Act as the organisation's recognised PKI authority and trusted advisor.
  • Provide expert guidance on certificate authority design, trust models, certificate lifecycle management, revocation strategies, and key protection.
  • Advise engineering and platform teams on PKI integration requirements and best practices.
  • Review proposed solutions and ensure alignment with established PKI standards and architectural principles.
  • Provide technical leadership for complex PKI-related initiatives and problem resolution.

Machine Identity & Certificate Lifecycle Management

  • Develop enterprise approaches for managing machine identities at scale.
  • Design and implement automated certificate issuance, renewal, rotation, and revocation processes.
  • Support certificate management across infrastructure, cloud, container, networking, and application environments.
  • Reduce operational risk associated with certificate expiry and trust failures.
  • Define standards for certificate discovery, inventory, monitoring, and reporting.

Stakeholder Engagement & Governance

  • Work closely with infrastructure, engineering, cloud, security, risk, and operational teams.
  • Translate complex PKI and cryptographic concepts into clear business and technical recommendations.
  • Develop PKI standards, policies, procedures, and governance documentation.
  • Support audits and regulatory reviews relating to cryptographic and PKI controls.
  • Influence technical direction and ensure PKI considerations are embedded within strategic initiatives.

Essential Skills & Experience

  • Proven experience designing and delivering enterprise PKI environments from inception through production operation.
  • Extensive experience designing Root CA, Intermediate CA, and Issuing CA architectures.
  • 10+ years of experience working with enterprise PKI, trust services, or cryptographic infrastructure.
  • Strong understanding of offline Root CA designs, trust hierarchy models, certificate policy development, and PKI governance.
  • Experience implementing and operating HSM-backed PKI environments.
  • Deep knowledge of X.509 certificates, PKCS standards, CRLs, OCSP, certificate validation, and trust chains.
  • Proven experience leading PKI programmes or transformations across multiple organisations.
  • Ability to engage effectively with senior stakeholders, architects, engineers, auditors, and operational teams.

Desirable Skills & Experience

  • Experience with Venafi, Keyfactor, DigiCert Trust Lifecycle Manager, Sectigo, EJBCA, HashiCorp Vault, or equivalent platforms.
  • Experience with Microsoft Active Directory Certificate Services (AD CS) design and migration programmes.
  • Experience implementing PKI within AWS, Azure, Kubernetes, and hybrid cloud environments.
  • Experience supporting financial services, regulated industries, or large-scale enterprise environments.
  • Relevant industry certifications in security, architecture, cloud, or cryptography.

Contract Details

  • Fixed Term Contract
  • Hybrid working model
  • London-based role
  • Competitive package dependent on experience
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Qube Research & Technologies's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Qube Research & Technologies's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Qube Research & Technologies's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.