PKI Specialist

PKI Specialist - 3-month contract (Quarterly rolling) - £600 per day (Outside IR35) - Berkshire/hybrid

Key skills/experience:

• Technical design skills
• PKI aware - able to take best practices in PKI design into account
• Ability to read, understand and apply Keyfactor documentation in designs
• Understand and apply knowledge of HSMs and remote HSM tokens in design and operational instruction to be produced
• Work with implementation/data-centre staff to ensure secure and trusted deployment and is as intended

The PKI will consist of:

• Multi-tenanted Keyfactor-based Root CA platform - spread over two sites
• Deactivation of the Root CAs will be required when not in active use - using a combination of cryptographic means via PKI/HSM management controls and network controls
• Secure replication between sites will be required - likely based on NFS methods
• Online multi-tenanted Keyfactor-based Issuing CA platform - employing a cluster of three nodes spread over two sites
• Two multi-tenanted Keyfactor-based Proxy platforms ( for RA, ACME, EST, CMPv2 etc., as well as CRL/OCSP services) to be deployed at two sites, front-ended by load balancers