We recruiting for a SC Cleared PKI Consultant to support the design and deployment of a Microsoft Active Directory Certificate Services (AD CS) environment within a highly secure enterprise estate. This is an excellent opportunity for an experienced PKI specialist with strong AD CS, NDES and certificate management expertise, ideally within security-conscious and complex enterprise environments.
Clearance: Security Clearance is highly desirable
The Role:
The requirement is to enable Microsoft AD CS to issue digital certificates within one Management Forest and one Resource Forest currently in scope, whilst producing a reusable build guide for future Forest deployments.
- Two Single Domain Active Directory forests (one Management Forest and one Resource Forest).
- Windows Server 2016 Forest Functional Level.
- Windows Server 2022 Operating System.
- Established trust relationships between forests and sites.
- Mixed Windows and Linux estate, with the majority of servers running Linux.
The successful consultant will support the project through discovery, design, implementation, documentation and handover.
- Discovery and Design Workshop.
- Design Document for AD CS, NDES and five certificate templates.
- Build of agreed PKI Environment including NDES and certificate templates.
- Creation of build documentation and deployment guide for future Forest implementations.
- Support the AD CS deployment whilst certificate templates are validated across Linux environments.
- Review of PKI deployment in an additional Resource Forest.
Technical Skills Required:
- Active Directory Certificate Services (AD CS).
- Public Key Infrastructure (PKI).
- Active Directory.
- Windows Server 2016 / 2022.
- Certificate template design and deployment.
- Enterprise PKI architecture and implementation.
- Build and deployment documentation.
- Security-focused infrastructure design.
Scope Includes:
- High-level design document for AD CS environment including Linux coexistence features such as NDES.
Design and configuration of certificate templates for:
- Web Server certificates.
- Domain Controllers for secure LDAP/GC.
- iGEL certificates.
Deployment of:
- 1 x Offline Root CA.
- 4 x Issuing Cas.
- Up to 4 x NDES Servers.
- Certificate template configuration and testing.
- PKI deployment review and assurance.
Soft Skills:
- Ability to lead discovery and design workshops.
- Excellent documentation and communication skills.
- Experience working in secure and highly regulated environments.
- Strong troubleshooting and problem-solving capability.
- Ability to work independently and lead technical delivery workstreams.
- Experience delivering structured handovers and operational documentation.