PKI/SSH Engineer
We are currently recruiting for a PKI/SSH Engineer with Kubernetes experience to join one of our Insurance clients on a 6-month contract
Inside IR35/Hybrid
Experience Required:
1. Extensive hands-on experience as a PKI Engineer, SSH Engineer, operating Venafi PKI, CLM and Venafi SSH Manager (Trust Protection Platform) in an enterprise environment.
2. Strong Kubernetes experience
3. Strong understanding of CA hierarchies, certificate chains, X.509, CRLs, OCSP, mTLS, and TLS configurations.
4. Experience integrating PKI/SSH services with Azure Key Vault, AWS KMS, OpenSSH, Kubernetes and service mesh certificate architectures (mTLS, SPIFFE/SPIRE style identities).
5. Proficiency with Scripting and automation (Python, PowerShell, Bash, Go, JSON) and IaC tools (Azure DevOps, Terraform, Ansible).
6. Experience modernising TLS certificate and SSH key management processes, uplifting protocol versions, and improving trust configurations.
7. Knowledge SSH tooling, including OpenSSL, OpenSSH, and Cloud Provider TLS/CA integrations and KMS APIs.
8. Experience migrating from long-lived SSH keys to SSH CA certificate based authentication.
9. Experience implementing workload identity across cloud platforms using certificates or cloud KMS.
10. Strong understanding of NIST/FIPS standards and relevant IETF RFCs for PKI, TLS, and...