SC Cleared Venafi Engineer - PKI/Certificate Management

We are seeking an experienced SC Cleared Venafi/Digital Identity Engineer to join a global IT consultancy supporting a major UK organisation on a security and identity transformation programme.

This is a hands-on technical role focused on Venafi configuration, PKI and certificate lifecycle management, supporting the implementation of secure certificate onboarding, governance, automation and operational readiness.

Working closely with Identity Architects, Business Analysts and operational teams, you will help establish and improve enterprise certificate management processes.

Key Responsibilities:

• Configure and manage Venafi Trust Protection Platform (TPP)/Venafi Control Plane.

• Support certificate discovery, onboarding, enrolment, renewal, revocation and lifecycle management.

• Implement technical configuration changes and integrate certificate management across applications, networks and cloud environments.

• Produce technical designs, CAB submissions and implementation documentation.

• Develop certificate inventory, ownership, compliance and reporting dashboards.

• Support audit requirements, operational readiness reviews (ORR) and handover to support teams.

• Identify opportunities for certificate automation and process improvements.

Essential Skills & Experience:

• 3-5+ years' experience in PKI and certificate lifecycle management.

• Strong hands-on experience with Venafi TPP or Venafi Control Plane.

• Knowledge of public/private PKI, TLS/SSL certificates, certificate authorities, keystores and HSMs.

• Experience with certificate discovery, onboarding, renewal, revocation and policy management.

• Experience integrating certificate management with enterprise infrastructure, cloud and applications.

• Strong technical documentation, change management and operational support experience.

• Active SC Clearance is mandatory.

Desirable:

• PowerShell, Python, REST APIs or certificate automation experience.

• Broader Identity & Access Management experience, including CyberArk or other PAM/IGA technologies.

• Experience supporting regulated or security-critical enterprise environments.

If you are an experienced SC Cleared Venafi/PKI Engineer available for a December contract, please apply with your latest CV, availability and day-rate expectations.