PKI Architect – DV Cleared

Basingstoke, Hampshire
Experis IT

PKI Architect

Must have an Active DV Clearance

Join a secure and fast paced environment as a PKI Architect, where you will design and lead enterprise grade cryptographic services that support mission critical Defence and National Security systems. This role offers the chance to work in a multi skilled agile team, delivering secure PKI foundations that underpin identity, authentication, and encryption across complex environments.

About the Role – PKI Architect

• As a PKI Architect, you will design and implement PKI solutions covering internal and external Certificate Authorities, OCSP, CRLs, and HSM integration.

• You will define policies, standards, and life cycle processes for certificates, ensuring secure deployment across systems, endpoints, and applications.

• The role involves implementing and maintaining CAs, RAs, key management infrastructure, and supporting secure architectures across hybrid and cloud platforms.

• You will collaborate with identity, DevOps, and cloud security teams to align PKI with broader security design.

• You will provide leadership during certificate related incidents, develop documentation, and deliver knowledge transfer to wider teams.

What We’re Looking For – PKI Architect

• At least three years of experience in PKI architecture and management.

• Strong understanding of CAs, HSMs, OCSP, CRLs, SCEP, and related PKI components.

• Hands on experience with Microsoft ADCS, Thales HSMs, OpenSSL, DigiCert, and similar tools.

• Knowledge of certificate usage for TLS, S/MIME, code signing, document signing, VPN, and smart cards.

• Understanding of encryption algorithms, hashing, and key management.

• Experience designing secure solutions in hybrid or cloud environments such as Azure or AWS.

• Familiarity with standards including NIST, FIPS, ISO 27001 and other compliance frameworks.

• Certifications such as CISSP, CISM, GIAC, or Microsoft identity qualifications are desirable.

Shape secure digital services and lead critical cryptographic design as a PKI Architect.

To apply, please send your CV by pressing the apply button.