PKI Engineer

We are seeking a highly skilled PKI Engineer to join our Cyber Security team at Sky. As a PKI Engineer, you will play a critical role in ensuring the security and integrity of our digital infrastructure.

• Operate and support PKI solutions and environments to ensure seamless certificate management.
• Analyse current certificate usage by individual Sky business and infrastructure teams to identify areas for improvement.
• Assist in onboarding new teams into the PKI service, ensuring a smooth transition and minimal disruption.
• Collaborate with Cyber vulnerability assessment teams to prioritise onboarding to automated certificate management.
• Work with App Service managed certificates, private and public certificates, and certificates from Key Vault to ensure robust cryptographic key security.
• Manage Key Management Systems (KMS) to ensure robust cryptographic key security and compliance.
• Support and manage PKI and Certificate deployment and automation, including Thales HSMs.
• Perform certificate lifecycle and checks, including issuing and revoking certificates.
• Support operational issues and provide expert guidance on certificate management best practices.
• Support Certificate Authority Administration, including Certificate Enrolment Web Service & Policy Web Service, and monitor Active Directory Certificate Services (ADCS).
• Educate our business on cybersecurity best practices, including certificate lifecycle management.

• Good knowledge and understanding of Information and/or Cyber Security principles and practices.
• Excellent written and verbal communication skills to liaise with stakeholders at varying levels of seniority across the business.
• Knowledge of cybersecurity frameworks, such as NIST and ISO27001.
• Experience with PKI systems and services, ACME protocol, and use of RESTful APIs.
• Experience with Certificate Authority Administration, ADCS monitoring, and related tasks.
• Understanding of PKI machine identity technologies, such as SSH, SSL, and TLS.
• Experience supporting Key Management Systems (KMS) for cryptographic key security.
• Experience with PKI and Certificate deployment and automation, including Thales HSMs.
• Good problem-solving skills, with the ability to tackle multiple tasks simultaneously.
• Being organised and diligent in using time and work management tools.
• A self-starter with strong interpersonal skills, hard-working, and flexible.
• Ability to work independently toward achieving a common vision for Network Security at Sky and establishing and maintaining relations with stakeholders up to C-level across multiple departments within an Enterprise environment.
• Open mind to learn new technologies, ability to analyse technical workflows and identify weak spots from cyber-security and operational points of view.
• Invested in a culture to self-learn and grow additional skillsets.
• Be curious to learn and share learnings and knowledge with the wider team.

Sky is a leading media and telecommunications company that operates in the UK, Italy, and Germany. Our products, platforms, and technologies are constantly evolving, and we are committed to keeping our customers, colleagues, and partners safe from cyber-attacks.

• A generous pension package.
• Private healthcare.
• Discounted mobile and broadband.
• A wide range of Sky VIP rewards and experiences.

We are a Disability Confident Employer and welcome and encourage applications from all candidates. We will look to ensure a fair and consistent experience for all, and will make reasonable adjustments to support you where appropriate.

We've embraced hybrid working and split our time between unique office spaces and the convenience of working from home. You'll find out more about what hybrid working looks like for your role later on in the recruitment process.