PKI Solutions Architect, Certificate Lifecycle and Migration
UK Visa Sponsorship Analytics
Above analytics are generated algorithmically based on job titles and may not always be the same as the company's job classification. You can also check detailed occupation eligibility, and salary criteria on our UK Visa Eligible Occupations & Salary Thresholds page.
Disclaimer: Hunt UK Visa Sponsors aggregates job listings from publicly available sources, such as search engines, to assist with your job hunting. We do not claim affiliation with Stanton House. For the most up-to-date job details, please visit the official website by clicking "Apply Now."
A PKI solutions architect is required to support on a certificate lifecycle and migration project for an exciting consultancy client.
This is an opportunity to take a fragmented certificate landscape with inconsistent ownership and lifecycle and transform into a consolidated PKI with structured lifecycle management, migration sequencing and certificates migrated to a cloud PKI solution.
Responsibilities
Define target PKI architecture, including lifecycle management and operational resilience.
Lead migration design and sequencing, align stakeholders and engineering teams.
Ensure automation, policy alignment, and secure operating model for certificates at scale.
Key deliverables
PKI target state, including trust model, hierarchy design, issuance profiles, and governance.
Certificate inventory approach and rationalisation, ownership model, and lifecycle processes.
Migration sequencing plan, cutover approach, and risk management, including legacy dependencies.
Automation patterns, issuance, renewal, revocation, monitoring, and reporting.
High Level Design, Low Level Design, decision records, operational runbooks inputs.
Essential skills and experience
Proven PKI architecture and modernisation experience, including large scale certificate estates.
Certificate lifecycle management, issuance, renewal automation, revocation, and policy enforcement.
Migration planning and sequencing experience, handling legacy systems and embedded certificates.
Strong stakeholder management across security, infrastructure, application teams, and operations.
Ability to produce and defend architecture artefacts through governance.
Additional desirable experience
Experience with cloud PKI services and hybrid trust models.
Experience with ACME based automation and certificate management tooling.
Familiarity with regulatory or audit expectations for key material protection and certificate governance.
This is a 3 month contract with a likelihood of extension, please include your outside IR35 day-rate expectations in any application.
Location: London
In office requirements: up to 5 days a week