PKI Architect

PKI Architect6-month contractOutside IR352 days a week onsite in LondonWe are seeking an experienced PKI Architect to lead the architectural design and delivery of a migration from on-premises Active Directory Certificate Services (AD CS) to DigiCert ONE, a SaaS-based certificate management platform. This is a like-for-like replacement of client certificate issuance and management, requiring careful planning to maintain continuity of service across a large, distributed enterprise environment with multiple member firms. The successful candidate will operate at an architectural level, working closely with the Global Digital team, security stakeholders, and consuming member firms to design a secure, well-governed, and operationally sound certificate services environment. Key ResponsibilitiesDesign the target-state architecture for migrating certificate services from on-premise AD CS to DigiCert ONEDefine and document the security and Role-Based Access Control (RBAC) model for the new certificate environmentProduce architecture and operational documentation for the Global Digital operational teamDevelop runbooks and operational guidance for consuming member firmsSupport formal customer security reviews, providing documentation and subject matter expertise as requiredAdvise on certificate life cycle management, encryption standards, and PKI best practice throughout the migrationWork with technical and business stakeholders to ensure a smooth, low-risk transition with minimal ..... full job details .....