PKI Engineer

Job description

PKI / SSH Engineer

We are currently recruiting for a PKI / SSH Engineer with Kubernetes experience to join one of our Insurance clients on a 6-month contract

Inside IR35 / Hybrid

Experience Required:

• Extensive hands-on experience as a PKI Engineer, SSH Engineer, operating Venafi PKI, CLM and Venafi SSH Manager (Trust Protection Platform) in an enterprise environment.
• Strong Kubernetes experience
• Strong understanding of CA hierarchies, certificate chains, X.509, CRLs, OCSP, mTLS, and TLS configurations.
• Experience integrating PKI/SSH services with Azure Key Vault, AWS KMS, OpenSSH, Kubernetes and service mesh certificate architectures (mTLS, SPIFFE/SPIRE style identities).
• Proficiency with scripting and automation (Python, PowerShell, Bash, Go, JSON) and IaC tools (Azure DevOps, Terraform, Ansible).
• Experience modernising TLS certificate and SSH key management processes, uplifting protocol versions, and improving trust configurations.
• Knowledge SSH tooling, including OpenSSL, OpenSSH, and Cloud Provider TLS/CA integrations and KMS APIs.
• Experience migrating from long-lived SSH keys to SSH CA certificate based authentication.
• Experience implementing workload identity across cloud platforms using certificates or cloud KMS.
• Strong understanding of NIST/FIPS standards and relevant IETF RFCs for PKI, TLS, and SSH.
• Knowledge of crypto-agility strategies, and CA agility patterns.

If this role is of interest and would like to know more, please apply now!

Extra information

Status

Open

Education Level

Secondary School

Location

London Area

Type of Contract

Full-time jobs

Published at

03-04-2026

Profession type

Accountancy

Full UK/EU driving license preferred

No

Car Preferred

No

Must be eligible to work in the EU

No

Cover Letter Required

No

Languages

English