Operational Lead-PKI Certificate Services- 9 Months- Inside IR35- Hybrid in London

Contract Type: Initial 9 Month Contract
Rate: £500 per day inside IR35
Location: Hybrid in London

Role Overview:

A 9-month contract role based in London (Hybrid) paying £500 per day, focused on establishing and managing PKI Certificate Services operations within a large enterprise. The position is responsible for end-to-end certificate life cycle management, governance, and compliance while driving modernisation initiatives including Legacy cryptography remediation. The role also supports the organisation's readiness for emerging cryptographic standards including Post-Quantum Cryptography.

Key Responsibilities:

• Manage and operationalise PKI Certificate Services, driving the full certificate life cycle including issuance, renewal, revocation, and expiry handling.
• Implement and enhance automation for certificate processes, contributing to the wider certificate services roadmap and strategy.
• Define and enforce certificate governance frameworks, ensuring compliance with NIS2, NITC, and enterprise security policies.
• Identify and remediate Legacy cryptographic weaknesses, and support adoption readiness for Post-Quantum Cryptography (PQC).
• Collaborate across internal teams (ADCS environment), external providers such as DigiCert, and global stakeholders including US-based teams.

What You Will Ideally Bring:

• PKI & certificate management- Strong, hands-on experience managing PKI infrastructure and certificate services at enterprise scale, covering the full certificate life cycle.
• ADCS expertise- Proven hands-on experience with Active Directory Certificate Services (ADCS) in complex, large-scale environments.
• External CA management- Experience working with external Certificate Authorities such as DigiCert, including integration, policy management, and governance.
• Certificate life cycle automation- Demonstrated ability to implement and enhance automation for certificate processes, ideally using PowerShell or similar Scripting tools.
• Cryptographic standards & compliance- Solid understanding of cryptographic protocols and standards, with knowledge of security governance frameworks and regulatory requirements such as NIS2; awareness of Post-Quantum Cryptography is a strong advantage.