PKI Architect

Job title: PKI ArchitectDuration: 9 monthsClearance required: DV or DV EligibleRate: To be discussedLocation: Hybrid, onsite in Corsham twice a weekSpecification: BelowOverview: An experienced Public Key Infrastructure (PKI) Architect and Subject Matter Expert (SME) is required to lead the design, build, integration and assurance of PKI services within secure, offline (air gapped) environments. The post holder will provide technical leadership to deliver a robust, resilient and compliant cryptographic trust service in support of a UK secure account, working predominantly from customer sites within controlled environments.The role demands proven experience designing and implementing PKI platforms for high-assurance use cases, including certificate life cycle management, cryptographic policy enforcement, secure key management, and integration with enterprise services and security controls. Key Responsibilities: Lead the architecture, design and delivery of PKI platforms operating in offline/disconnected networks, ensuring solutions are secure, supportable and auditable.Define and implement PKI components, including (as applicable): Root CA (offline), Issuing CAs, Registration Authorities (RA)OCSP/CRL services and distribution models suitable for disconnected environmentsCertificate templates, enrolment policies, and certificate life cycle processesDevelop secure and repeatable mechanisms for certificate and revocation data transfer into/out of air gapped environments in ..... full job details .....