Identity and Key Management SME
Location: Hybrid / 60% office 40% home
Duration: 31/12/2026
Rate £500
MUST BE PAYE THROUGH UMBRELLA
Role Description:
The bank is seeking an experienced IKP SME to provide expert guidance and implementation support for Identity and Key Management within the OpenShift infrastructure migration project. This role ensures secure identity management, encryption key lifecycle operations, and compliance with the bank's global security standards across multi-cloud, hybrid, or on-prem environments.
Key Responsibilities:
* Identity & Key Management:
* Design and implement identity and key management solutions for OpenShift clusters.
* Manage encryption key lifecycle: generation, rotation, storage, and retirement.
* Ensure integration with the bank's enterprise identity and access management systems.
* Security & Compliance:
* Align all identity and key management processes with the bank's security policies and regulatory requirements.
* Implement robust authentication and authorization mechanisms for OpenShift workloads.
* Support audits and compliance checks related to cryptographic controls.
* Integration & Support:
* Collaborate with OpenShift Architects, Infrastructure Engineers, and Automation teams to embed secure identity and key management practices.
* Provide technical expertise for API integrations and automation of key management tasks.
* Documentation & Governance:
* Maintain detailed documentation of identity and key management configurations.
* Ensure adherence to the bank's IT governance and change management processes.
Required Skills & Qualifications:
* Deep expertise in Identity and Key Management Platforms (IKP) and cryptographic key lifecycle management.
* Strong knowledge of PKI, TLS/SSL, and encryption standards.
* Familiarity with OpenShift, Kubernetes, and container security best practices.
* Experience with enterprise IAM solutions and integration with cloud platforms.
* Excellent understanding of regulatory requirements (e.g., PCI DSS, GDPR).
* Relevant certifications (e.g., CISSP, CISM, or cloud security certifications) preferred.
JBRP1_UKTJ