PKI Microsoft Engineer in England

PKI Microsoft Engineer
£475 a day Inside IR35
4 week contract

We are currently recruiting for a Public Key Infrastructure Engineer to join our growing client delivery business. Who are obsessive about solving business and client challenges, with a strong focus on security risk to help tackle and direct client challenges. This is a great opportunity for you to play a pivotal role in helping to shape our client's transformation journeys.

What to Expect

You will have a Public Key Infrastructure background and be able to works on the Design, Development and Testing phases to unpack and evaluate PKI Implementation.

Draws upon strong Public Key Infrastructure experience to:

Identify
Client needs in terms of; outcomes, stakeholder engagement and risk mitigation.
Stakeholder requirements for protecting the organisation's mission and business processes.
Security Testing & Vulnerability; Assumptions, Issues and Dependencies.

Review, challenge / validate
Project solution / application architecture change - with a security lens.
Impact and risk associated within any project changes.
Validation of testing outcomes and success criteria.

Define
Project development and test strategy, test plans, test scenarios and approach.
Change Impact & Risk assessment.
Security test objectives and targets.
Appropriate; metrics, and processes to achieve objectives and targets.
Weekly reporting on progress - for Client Product Owner and Director of Security Architecture/Engineering..

Enact
The setup of the Certificate Services and Management environment, using:
Microsoft Active Directory Certificate Services.
Integration of software to Hardware Security Modules.
Network Device Enrollment Services.
Other Third Party Enrollment Services (such as SCEP, EST).
Certificate Lifecycle Management across a heterogeneous environment.

Oversee, evaluate, and supports
Documentation, validation, assessment, and authorization processes necessary to assure new and existing information
Discovery and audits, for extraction of findings and documentation of recommendations.
The adoption of frameworks such as ISO27001, NIST and CABF, WebTrust, ETSI and using these to implement outcomes.

Demonstrate
Subject matter expertise in Public Key Infrastructure.
Subject matter expertise in deploying a multi-tier hierarchical PKI.
Subject matter expertise in the production of certificates in detail.
Subject matter expertise in the Windows Operating system is essential.
Subject matter expertise in Microsoft Active Directory Certificate Services.
Subject matter expertise in Network Device Enrolment Services.
Subject matter expertise in provision and control of Hardware Security Modules.
Ideally expert knowledge in deploying the above in AWS environments.
Experience in working with CI/CD deployment pipelines and the various stages required.
Experience in deploying golden image builds and necessary image, package preparation.
Previous experience of working both on-premise and cloud based environments (AWS, Azure, GCP) would be beneficial.
A good understanding of the protocols underpinning the web - TCP/IP, HTTP, SSL/TLS
A good understanding of hardware load-balancing, firewalls, multi-tiered architectures.
Able to take feedback & lessons learnt from both clients and colleagues.

Disclaimer:

This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission.