Senior PKI Expert experience with PKI, EJBCA and HSM experience

Key skills: Senior PKI/Infrastructure Engineer, Design, enterprise-scale PKI environment, 3-tier PKI/Certificate Authority hierarchy, EJBCA, Hardware Security Modules (HSMs), key life cycle management, PKI services within Kubernetes environments, Linux-based infrastructure,infrastructure deployment and configuration, Develop and maintain Infrastructure-as-Code and operational tooling, troubleshoot complex PKI, infrastructure and platform issues, contribute to security, resilience, scalability and operational best practice

Our client is urgently searching for a Senior PKI Expert experience with PKI, EJBCA and HSM experience to work as a contractor on a critical project in Europe. The client is based in Denmark and there is an option to work in a hybrid role as much of the work can be done off site but some work will need to be done on site, estimated at 2 days per week.

A successful consultant will have strong knowledge in:

Senior PKI/Infrastructure Engineer

Enterprise-scale PKI

Multi-tier/3-tier PKI architectures

EJBCA

Hardware Security Modules (HSMs)

Kubernetes

Linux

Open-source technologies

Infrastructure automation and Scripting

Experience with several of the following:

Terrafor

Bash

YAML

PowerShell

A good understanding of PKI concepts such as certificate authorities, certificate life cycle management, private-key security, certificate revocation and secure key management is expected.

Desirable Skills:

Proxmox V

Talos Linux

The role:

The role will focus on the design, implementation and operation of an enterprise-scale Public Key Infrastructure (PKI) environment, working with EJBCA, Hardware Security Modules (HSMs), Kubernetes and Linux.

This is a hands-on technical position suited to an engineer with strong experience of enterprise PKI environments and modern infrastructure automation.

Key Responsibilities

• Design, build and support an enterprise-scale PKI environment
• Work with and maintain a 3-tier PKI/Certificate Authority hierarchy
• Deploy, configure and administer EJBCA
• Integrate and manage Hardware Security Modules (HSMs)
• Support secure certificate and key life cycle management
• Deploy and operate PKI services within Kubernetes environments
• Work extensively with Linux-based infrastructure
• Automate infrastructure deployment and configuration
• Develop and maintain Infrastructure-as-Code and operational tooling
• Troubleshoot complex PKI, infrastructure and platform issues
• Contribute to security, resilience, scalability and operational best practice

Profile

The successful consultant is an experienced infrastructure or security engineer who has worked directly with large-scale PKI implementations, rather than someone whose certificate experience is limited to general DevOps or Kubernetes administration.

You should be comfortable working independently in a technically complex environment and able to combine deep PKI knowledge with strong Linux, Kubernetes and infrastructure automation skills.

This is an English speaking role. The location is in Denmark so weekly travel is required for 2 days onsite. This maybe negotiable to fortnightly

Please send your CV ASAP for immediate and confidential interviews.