PKI HSM Consultant - On Site in London - Inside IR35 - 6 Months

PKI HSM Consultant - On Site in London - Inside IR35 - 6 months

Role Overview

We are looking for a PKI and HSM SME to join on a 6-month fully office-based contract in London (5 days on-site). The role supports a large-scale security transformation programme in the travel and tourism sector, focusing on hands-on implementation, configuration, and troubleshooting of enterprise PKI and HSM services - including Microsoft ADCS, Microsoft Cloud PKI, hardware HSM platforms, and Azure-based HSM services.

Key Responsibilities

• Build and configure PKI services based on defined architecture, managing the full certificate life cycle including issuance, renewal, revocation, and replacement, and configuring certificate distribution and validation services (CRL, OCSP)
• Perform HSM setup and administration including provisioning, partitioning, backup, and high availability, executing key management activities including key generation, storage, rotation, and secure handling
• Support and participate in key ceremonies following defined procedures, applying security controls including access control, role separation, and dual control across PKI and HSM environments
• Support migration from Legacy PKI environments to target solutions, integrating PKI services with Active Directory, Intune, and enterprise applications, and troubleshooting issues across certificates, trust chains, enrolment, and HSM operations
• Maintain audit logs, monitoring, and operational records, produce technical documentation, and support transition to BAU operations working closely with Security Architects, Infrastructure, and Application teams

Top 5 Skills

• 10+ years of IT experience with at least 4 years hands-on PKI and HSM experience, including strong expertise with Microsoft ADCS and cloud-based PKI solutions such as Microsoft Cloud PKI
• Proven experience with hardware HSM platforms such as Thales Luna HSM or Entrust nShield HSM, and cloud-based HSM services including Azure Key Vault Managed HSM
• Strong understanding of PKI concepts including CA hierarchy, certificate templates, CRL, and OCSP, combined with deep knowledge of cryptographic principles and secure key management practices
• Experience executing or supporting key ceremonies, with a solid understanding of audit, compliance, and operational controls for PKI and HSM environments
• Experience integrating PKI with Active Directory, Intune, and enterprise applications, with strong troubleshooting capability and experience working in enterprise build, migration, or transformation programmes

Contract Details

• Initial 6 Month Contract
• Day Rate: £550 per day Inside IR35
• On Site in London