Senior PKI Engineer

Location: London, United Kingdom; hybrid working with time split between the office and home

Company

hirify.global develops broadband, broadcast, streaming, mobile, and connected television products and services.

What you will do

• Design, build, operate, and support PKI solutions and environments.
• Administer Certificate Authorities, Certificate Enrolment Web Service, Policy Web Service, and monitor Active Directory Certificate Services.
• Manage Key Management Systems and Thales HSMs to protect cryptographic keys.
• Deploy and automate certificates, including private, public, App Service, and Key Vault certificates.
• Prepare onboarding roadmaps for existing certificate use cases and prioritise migration to automated certificate management.
• Support the PKI managed service, including certificate checks, issuance, and revocation for hirify.global and Comcast users.

Requirements

• Senior-level technical and professional leadership across the discipline.
• Deep knowledge of information and cybersecurity, including security principles and frameworks such as NIST and ISO 27001.
• Proficient written and spoken English and strong communication skills for stakeholder engagement.
• Hands-on experience with PKI systems, Certificate Authority Administration, ADCS monitoring, certificate deployment and automation, ACME, and RESTful APIs.
• Experience with data-in-motion and data-at-rest encryption, SSH, SSL, TLS, and machine identity technologies.
• Experience managing KMS environments and Thales HSMs.

Culture & Benefits

• Hybrid working combining office and home working.
• Private healthcare and a generous pension package.
• Discounted mobile and broadband services.
• Access to hirify.global VIP rewards, hirify.global Q, and discounted hirify.global Glass.
• Inclusive workplace with reasonable adjustments available during the recruitment process.

Hiring process

• Successful applicants must complete a criminal record check.