Corsham
PKI Operator Location: Corsham - 5days a week Salary: 60K DV Clearance required Key Responsibilities Operational Support & Incident Management • Provide 2nd/3rd line support for PKI services and supporting infrastructure, including root, subordinate, and issuing CA’s, • Troubleshoot and resolve certificate issuance, revocation, auto-enrolment, and chain validation issues., • Manage and respond to incidents, service requests, and change tickets within SLA. Infrastructure support & maintenance, • Manage and respond to infrastructure focussed service requests such as: o Provision/de-provision AzureAD accounts o Setup SSO for applications o Monitor of Microsoft Defender portal and respond to security alerts o Configuration and maintenance of Microsoft Intune Certificate Lifecycle Management, • Assist with certificate requests, renewals, revocations, and rekeying operations., • Monitor and ensure timely renewal of critical certificates to prevent outages., • Maintain inventory of issued certificates and their expiration timelines. System Monitoring and Maintenance • Monitor the health of CA services, CRLs, OCSP responders, and AIA/CDP availability. • Ensure regular backups of CA keys, databases, configurations, platforms and state., • Conduct patching and updates of PKI-related servers and services., • Carry out collection, reporting and remediation tasks in order to maintain a crypto inventory Compliance and Security, • Ensure adherence to security best practices and organisational Certificate Policies (CP) and Certification Practice Statements (CPS)., • Review and manage audit logs for CA operations and maintain documentation for compliance., • Implement role-based access control, separation of duties, and HSM usage per policy., • Maintain accurate documentation of PKI processes, configurations, and procedures., • Implement and enforce revocation policies. Technical Skills and Experience Essential: • An understanding of Public Key Infrastructure concepts, including certificate authorities (Root, Subordinate, Issuing), CRLs, OCSP, and key management., • Windows Server Administration: Proficient in administering Windows Server, particularly Active Directory., • Infrastructure Knowledge: Familiarity with DNS, DHCP, TCP/IP, and common network services., • Ability to execute PowerShell scripts for automating certificate tasks and system checks., • Awareness of role-based access control, key protection standards (e.g., FIPS 140-2), and separation of duties in secure environments., • Experience using Microsoft Management Console (MMC) snap-ins, event logs, and SIEM platforms to identify and resolve issues proactively., • Experience with IT asset management tools related to discovery and information collection, • Understanding of backup procedures., • Ability to document technical processes., • Familiarity with incident, problem, and change management processes (ITIL)., • Cloud infrastructure experience (AWS, Azure, Intune)., • Familiarity with regulatory frameworks: NIST, GDPR, etc., • Proficiency in technical documentation (MS Word, Visio, PowerPoint, Excel). Soft Skills and Experience Essential: • Strong verbal and written communication skills for interacting with clients and documenting processes, • Analytical mindset and problem-solving capability., • Detail-oriented and compliance-focused., • Comfortable working independently and in cross-functional teams., • Can follow written processes. Qualifications & Certifications • Desirable: CompTIA Security+, or a recognised Vendor Certification, • Security Clearance: DV. Benefits, • 27 days holiday + 8 public holidays (pro rata), • Up to 5% employer pension contribution, • 10% annual performance-related bonus, • Uncapped sales incentives, • Annual charity donation of your choice, • Flexible benefits payment, • Private Healthcare