Talent.com
Lucid Support Services Ltd
PKI ArchitectLucid Support Services Ltd • Corsham, Wiltshire, United Kingdom
PKI Architect

PKI Architect

Lucid Support Services Ltd • Corsham, Wiltshire, United Kingdom
1 day ago
Job type
  • Full-time
Job description

Job Description



Please read the following job description thoroughly to ensure you are the right fit for this role before applying.

Job title: PKI Architect


Duration: 9 months


Clearance required: DV or DV Eligible


Rate: To be discussed


Location: Hybrid, onsite in Corsham twice a week


Specification: Below


Overview:



  • An experienced Public Key Infrastructure (PKI) Architect and Subject Matter Expert (SME) is required to lead the design, build, integration and assurance of PKI services within secure, offline (air gapped) environments. The post holder will provide technical leadership to deliver a robust, resilient and compliant cryptographic trust service in support of a UK secure account, working predominantly from customer sites within controlled environments.


The role demands proven experience designing and implementing PKI platforms for high-assurance use cases, including certificate life cycle management, cryptographic policy enforcement, secure key management, and integration with enterprise services and security controls.



Key Responsibilities:



  • Lead the architecture, design and delivery of PKI platforms operating in offline/disconnected networks, ensuring solutions are secure, supportable and auditable.



Define and implement PKI components, including (as applicable):



  • Root CA (offline), Issuing CAs, Registration Authorities (RA)


OCSP/CRL services and distribution models suitable for disconnected environments


Certificate templates, enrolment policies, and certificate life cycle processes


Develop secure and repeatable mechanisms for certificate and revocation data transfer into/out of air gapped environments in accordance with approved processes.


Establish and maintain cryptographic governance, including certificate policy and certificate practice statements (CP/CPS) where required, and alignment to programme security requirements.


Design secure key management processes, including key generation, storage, backup, escrow (if authorised), destruction, and compromise handling.


Define operational models, including role separation, dual control, and privileged administration, aligned to security policy and audit requirements.


Produce and maintain formal design and assurance documentation and provide technical input into risk assessments and accreditation evidence packs.



Support the integration of PKI services with enterprise capabilities (as applicable), including:



  • Microsoft Active Directory Certificate Services (AD CS) and Group Policy distribution


802.1X/NAC, VPN, TLS for internal services, code signing, device identity


Provide technical leadership for troubleshooting, incident support, root cause analysis, and continuous improvement of PKI services.


Engage with internal and external stakeholders at all levels, including security, infrastructure, delivery teams and customer representatives, primarily on-site within secure facilities.



Required Skills & Experience:



  • Demonstrable experience operating as a PKI Architect or senior PKI SME within complex enterprise environments.


Proven experience designing and building PKI platforms in offline/air gapped environments, including handling of:




  • Controlled import/export processes


Revocation publishing strategies (CRL/OCSP) for disconnected networks


Secure media handling and procedural controls




  • Strong knowledge of PKI concepts and implementation including:




  • X.509 certificates, trust chains, certificate policies, key usage and extended key usage


Certificate life cycle management (issue, renew, revoke, recover, replace)


CRL/Delta CRL design, OCSP stapling considerations (where applicable)




  • Strong understanding of cryptography fundamentals and operational security, including:




  • Algorithm selection and key sizes appropriate to policy


HSM design/operations (preferred), secure key ceremonies, tamper controls


Role-based administration, segregation of duties, dual control




  • Experience with designing secure operational models (build, run, audit), including:




  • Break-glass and recovery arrangements


Compromise response procedures


Monitoring, logging and evidence generation




  • Demonstrable experience producing formal technical documentation, including:




  • High-Level Designs (HLDs)


Low-Level Designs (LLDs)


Security architecture documentation


Standard Operating Procedures (SOPs), runbooks, and key ceremony scripts


Strong stakeholder engagement and communication skills, including the ability to brief technical and non-technical audiences.



Government Security Standards:


The post holder must be able to design and assure solutions in alignment with relevant UK Government security policies and guidance, including (as applicable to the programme):



  • JSP 440 - Defence Manual of Security


JSP 604 - Network Rules and Design Principles


JSP 453 - Information Assurance Policy (where applicable)


NCSC Cyber Security Design Principles and applicable NCSC guidance for secure configuration and cryptographic services


MOD-aligned Secure by Design principles following NIST framework and MOD Security framework, and evidence-based assurance in support of accreditation



Desirable:



  • Experience working within the Defence and/or Aerospace sector, including delivery into regulated, high-assurance environments.


Experience with Microsoft AD CS architectures (offline root, issuing CA tiers, template governance) and/or other enterprise PKI stacks.


Experience implementing PKI for:


Device identity (workstations/Servers), user authentication, mutual TLS, code signing, S/MIME (as required)


Familiarity with HSM operations and assurance requirements and conducting or supporting key ceremonies.



If you are available and interested in this opportunity, please apply for further information. Please note that due to high volumes of applications we are unable to contact every applicant. If you do not hear back from us within 7 days of sending your application, please assume that you have not been successful on this occasion.


At Lucid, we celebrate difference and value diverse perspectives, underpinned by our values 'Honesty, Integrity and Pragmatism'. We are proud to provide equal opportunities in line with our Diversity and Inclusion policy and welcome applications from all suitably qualified or experienced people, regardless of personal characteristics. xwwtmva If you have a disability or health condition and seek support throughout the recruitment process, please do not hesitate to contact us via the details below.

Create a job alert for this search

PKI Architect • Corsham, Wiltshire, United Kingdom

Similar jobs

Senior Data Architect

Cyber Security training coursesBath, England, GB
Temporary

Hybrid Working | Edinburgh, Stirling, Bath or London (2-3 days per week).Shape the Future of Data, Analytics & AI in Financial Services.We're supporting a major UK financial services organisation w... Show more

 • Promoted

System Architect

AkkodisTemplecombe, England, GB
Full-time

Be among the first 25 applicants.Get AI-powered advice on this job and more exclusive features.Direct message the job poster from Akkodis.As a Systems Architect within Akkodis, you’ll direct a team... Show more

 • Promoted

Technical Architect - Azure

Methods Business and Digital Technology LimitedSlimbridge, England, GB
Full-time

Active SC or DV Clearance Required.On-site 5 Days per Week (Travel/Accommodation supported through Methods).Methods is supporting a client operating within a highly secure environment who is seekin... Show more

 • Promoted

Strategic AI & Data Governance Architect

Ex-Mill Recruitment LtdCorsham, England, GB
Full-time

Business Architect in Corsham to support the development of policies and standards for AI, Data, and Information Management.The role involves engaging with stakeholders and analyzing business proce... Show more

 • Promoted

E2E Service Architect

CapgeminiBath, England, GB
Full-time

The E2E Service Architect will design, define, and govern the end‑to‑end service architecture for a large‑scale, multi‑national Network Management Service for a satellite‑based cellular broadband n... Show more

 • Promoted

EPR Solutions Architect - 7-month CX

iO AssociatesCorsham, England, GB
Temporary

SC Cleared Solutions Architect.Hybrid - mainly remote, with occasional onsite travel (Corsham or Lichfield).We're supporting a major public sector programme that requires an.SC Cleared Solutions Ar... Show more

 • Promoted

Solution Architect (Digital Consulting) - Up To £70,000 A Year

F5 consultantsBath, United Kingdom Of Great Britain And Northern Ireland, UK
Full-time

Solution Architect (Digital Consulting).Home working + 1 day per week on site in Bristol.Eligibility for UK Security Clearance (SC).A growing strategy, operations, and digital consultancy is lookin... Show more

 • Promoted

IAM/IDM Architect (SC Cleared)

Syntax Consultancy LtdCorsham, England, GB
Permanent

Salary: £90,000 - 115,000 per year.Active SC Security Clearance is essential.In-depth identity and access management (IAM/IDM) architecture experience is essential.Experience leading IAM platforms ... Show more

 • Promoted

Strategic Enterprise Integration Architect

Rotork plcBath, England, GB
Full-time

Rotork plc in Bath is seeking an Integration Architect responsible for defining, governing, and assuring integration architecture across enterprise systems and applications.The role includes design... Show more

 • Promoted

DV-Cleared Infrastructure & PKI Engineer

Gazelle GlobalCorsham, England, GB
Full-time

Gazelle Global is seeking an Infrastructure/Windows Engineer located in Corsham, UK, to maintain secure enterprise infrastructure, including critical systems across various platforms.The role invol... Show more

 • Promoted

Architect

Response InformaticsCorsham, England, GB
Full-time

Strong enterprise IAM experience.Secure government / public sector / regulated experience.Technical depth across identity platforms, integrations, schemas and APIs.Ability to simplify complex platf... Show more

 • Promoted

Power BI & AI Intern — Process Improvement

SLBStonehouse, England, GB
Full-time

SLB is seeking a Business Process Improvement Intern in Supply Chain at the Stonehouse Technology Centre.You will break down existing processes to make data more accessible, enabling teams to evalu... Show more

 • Promoted

Enterprise Architect – Data & AI Governance vacancy in Corsham (179DM)

Ex-Mill Recruitment LtdCorsham, England, GB
Full-time

Enterprise Architect – Data & AI Governance vacancy in Corsham (179DM).Role Purpose: Lead the development of enterprise‑wide architecture, policy, standards, and governance frameworks for Artificia... Show more

 • Promoted

Azure Pre-Sales Architect: Cloud Strategy & Engagement

Cloud DirectBath, England, GB
Full-time

A leading cloud services provider in the UK is seeking an Azure Presales Architect to guide customers through cloud transformations.This customer-facing role involves pre-sales activities with a fo... Show more

 • Promoted

Solutions Architect - £500 - £600 A Day - Remote

Langham RecruitmentBath, United Kingdom Of Great Britain And Northern Ireland, UK
Remote
Temporary

We are looking for a contract Solution Architect with experience of onboarding and integrating new solutions into existing business systems for our plc client.We are seeking a Solution Architect wh... Show more

 • Promoted

Software Architect

weServedCorsham, England, GB
Full-time +1

Location: Hawthorn, Corsham – Majority of the role can be remote.Compensation: Competitive + Benefits.Role Type: Full time / Permanent.At Babcock we’re working to create a safe and secure world, to... Show more

 • Promoted

Data Migration Architect - £644 A Day

HaysCorsham, United Kingdom Of Great Britain And Northern Ireland, UK
Permanent

Hays ar now looking for a Data Migration Architect for one of our local clients:Rate: £644 per day, Outside IR35Hybrid: 2 days a week in Corsham, rest is WFHDuration: 6 Month+ Contract.Candidates m... Show more

 • Promoted

Chief Architect

ANSON MCCADEMangotsfield, United Kingdom Of Great Britain And Northern Ireland, UK
Full-time

Not sure what skills you will need for this opportunity Simply read the full description below to get a complete picture of candidate requirements.Join a leading technology and innovation consultan... Show more

 • Promoted

Data Architect - International Standards & Interoperability Lead

UK Ministry of DefenceCorsham, England, GB
Full-time

A government defense organization is seeking an experienced Data Architect to oversee the Chief Data Office, focusing on international data standards engineering.Key responsibilities include provid... Show more

 • Promoted

AI Adoption Architect

ExperisBath, England, GB
Full-time

Experis seeks an AI Adoption & Enablement Lead to accelerate responsible, high-value AI across the business.Bridge tech and business teams, identify practical AI opportunities, drive adoption and e... Show more