Your new company A leading organisation operating within a secure and regulated environment, committed to maintaining a robust identity, authentication and access infrastructure. You will join a highly skilled team responsible for ensuring the stability, security and continuous improvement of the organisation's identity and PKI services across enterprise and hybrid platforms. Your new role As an Identity & PKI Engineer, you will be responsible for supporting and enhancing the organisation's identity platforms across both on-premise Active Directory and Azure AD/Entra ID. You will play a key role in the delivery of new services as part of ongoing project work, as well as the maintenance, optimisation and troubleshooting of existing systems. Your work will include Active Directory administration, hybrid identity integration, Azure security controls, certificate lifecycle management, and the operation of PKI components within secure environments. You will also contribute to identity-related automation and best practice hardening across authentication and access platforms. What you'll need to succeed You will have strong experience across identity, access and PKI services, including: Expertise in Active Directory design, administration and troubleshooting, including: Forests, domains, trusts Group Policy DNS AD security hardening Strong experience with Microsoft Azure in enterprise environments, including: Azure AD / Entra ID Identity federation RBAC Conditional Access Zero Trust technologies Hybrid identity experience (on-prem AD ? Azure) Identity and access management best practice Experience supporting secure and regulated platforms Public Key Infrastructure (PKI) expertise, including: Certificate lifecycle management (issuance, renewal, revocation) Integration of certificates across AD, Azure, servers, applications and services Understanding of trust models, CRLs, OCSP and PKI security best practice Experience operating identity/PKI services within secure and regulated environments Strong troubleshooting ability across identity, authentication and access issues PowerShell scripting and automation for identity and certificate management (desirable) What you'll get in return The opportunity to work in a highly secure and regulated enterprise environment Involvement in both BAU support and hands-on project delivery A collaborative team culture with exposure to modern identity and security technologies Competitive rate via Umbrella What you need to do now If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now. If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion about your career. Hays EA is a trading division of Hays Specialist Recruitment Limited and acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk