Job Description

Posted 1 hour ago

Certificate & Key Management Engineer

6 months

£550 – £600 p/d INSIDE ir35

Hybrid Remote in Dartford, Kent, UK

Contract Details

Type: Contract – Inside IR35
Duration: Initial 6 months (with strong likelihood of extension)
Location: South East (occasional on‑site in Dartford)
Working Model: Hybrid / largely remote
Rate: Competitive market rate (Inside IR35)

Role Overview

We are seeking an experienced PKI / Certificate Management Engineer to support the renewal, management, and risk reduction of a large and growing certificate estate.

This is a hands‑on, operationally focused role, brought in to stabilise existing certificate processes and manage renewal overheads while a longer‑term Certificate Management Platform (CMP) and improved governance processes are implemented.

The successful candidate will take ownership of certificate lifecycle management across cloud and on‑prem environments, ensuring service continuity and reducing the risk of certificate‑related outages.

Required Skills & Experience

Essential

Proven hands‑on experience as a PKI Engineer, Certificate Management Engineer, or similar
Strong understanding of X.509 certificates, TLS/SSL, and certificate lifecycle best practices
Experience managing certificates across:
Azure (App Registrations / Enterprise Applications)
Public certificate authorities (e.g. DigiCert or equivalent)
Internal PKI / CA environments
Experience handling shared secrets and certificate‑based authentication
Ability to work independently and take ownership of delivery in a contract role

Desirable

Experience with Azure Key Vault or similar secret‑management tooling
Knowledge of Certificate Management Platforms (CMPs)
Exposure to HSMs
Experience in regulated or enterprise‑scale environments

Personal Attributes

Pragmatic and delivery‑focused
Comfortable working in environments with technical debt
Clear communicator, able to document and explain processes
Calm and methodical when managing operational risk