Be responsible for the on-boarding requests to xPKI and deliver these within SLA
Provide cryptography guidance and support
Provide regular metrics and ensure we meet our board commitments.
Understand and support the PKI solutions and environments.
Proactively analyse current use of certificates by individual Sky business and infrastructure teams.
Ensure our Certificate Inventory is accurate
Help Sky be PQC ready
Work with Cyber vulnerability assessment teams to prioritise onboarding
Ensure automation of certificate lifecycle management (internal and external)
Support or initiate certificate awareness campaigns.
Support Senior Engineers to perform Key ceremonies, BCP/DR tests and other work stream as required.
Identify process enhancement and automation opportunities.
You will perform certificate lifecycle and checks, including issuing and revoking certificates.
You will be able to support operational issues.
Be able to educate our business on cybersecurity best practice including certificate lifecycle management.

Hands on experience of PKI systems and services, ACME protocol, use of RESTful APIs.
Experience with Certificate Authority Administration, ADCS monitoring, and related tasks
Understanding in PKI machine identity technologies such as SSH, SSL, TLS
Experience supporting Key Management Systems (KMS) for cryptographic key security.
A good knowledge and understanding of Information and/or Cyber Security.
Good written and verbal communication skills to liaise with stakeholders at varying levels of seniority across the business.
Knowledge of cybersecurity principles and practices and an understanding of security frameworks e.g., NIST, ISO27001.
Hands on experience with: PKI and Certificate deployment and automation.
Thales HSMs

PKI Engineer

Key skills