Security Digital Identity Engineer

Security Digital Identity Engineer

+SC cleared role - current active clearance is essential

+2 months +

+Hybrid

+Inside IR35

+600 - 650 a day

We are recruiting an experienced Security Digital Identity Engineer to support the delivery and implementation of digital identity and certificate management capabilities within a secure environment.

The successful candidate will act as a technical Subject Matter Expert (SME), focusing on Public Key Infrastructure (PKI), certificate lifecycle management and Venafi technologies. Working closely with architects, business analysts and operational teams, you will deliver technical configuration changes, support certificate onboarding and ensure solutions meet operational, security and compliance requirements.

• Perform technical configuration and engineering changes across the Venafi platform, working closely with operational teams and following architectural and business analysis guidance.

• Define and support the scope of delivery for Venafi implementation and enhancements.

• Develop technical designs, implementation documentation and supporting technical evidence.

• Support Change Advisory Board (CAB) meetings and prepare relevant change submissions.

• Develop and configure monthly reporting dashboards in collaboration with customer and service delivery teams.

• Produce audit, compliance and certificate lifecycle management reports.

• Support Operational Readiness Review (ORR) activities, ensuring technical documentation and reporting requirements are met.

• Define and implement the certificate onboarding approach, ensuring all new certificates follow the agreed onboarding model.

• Support certificate discovery, ownership, inventory management and lifecycle governance.

• Identify opportunities for automation and continuous improvement across certificate management processes.

• Ensure effective operational handover and documentation for ongoing service management.

• 3-5 years' experience in PKI and certificate lifecycle management.

• Hands-on experience with Venafi Trust Protection Platform (TPP) or Venafi Control Plane .

• Experience integrating, deploying and engineering digital identity platforms.

• Strong understanding of certificate discovery, enrolment, renewal, revocation, ownership and policy management.

• Good knowledge of public and private PKI, TLS certificates, keystores, Hardware Security Modules (HSMs) and Certificate Authorities (CAs).

• Experience integrating certificate management solutions across cloud, network and application environments.

• Ability to produce technical designs, CAB submissions, implementation evidence and operational handover documentation.

• Experience working with technical architects, business analysts and operational/run teams.

• Strong understanding of security, audit and compliance requirements.

• Experience with Privileged Access Management (PAM) technologies, particularly CyberArk.

• Knowledge of Identity Governance and Administration (IGA) platforms.

• PowerShell, Python, API integration or other automation experience.

• Experience working within large-scale, secure enterprise environments.