SC Cleared PKI Consultant - Stevenage/Remote - 15 Days

The Role

The requirement is to enable Microsoft AD CS to issue digital certificates within one Management Forest and one Resource Forest currently in scope, whilst producing a reusable build guide for future Forest deployments.

The environment consists of:

• Two Single Domain Active Directory forests (one Management Forest and one Resource Forest)
• Windows Server 2016 Forest Functional Level
• Windows Server 2022 Operating System
• Established trust relationships between forests and sites
• Mixed Windows and Linux estate, with the majority of Servers running Linux

Key Deliverables

• Discovery and Design Workshop
• Design Document for AD CS, NDES and five certificate templates
• Build of agreed PKI Environment including NDES and certificate templates
• Creation of build documentation and deployment guide for future Forest implementations
• Support the AD CS deployment whilst certificate templates are validated across Linux environments
• Review of PKI deployment in an additional Resource Forest

Technical Skills Required: Must-Have Skills

• Active Directory Certificate Services (AD CS)
• Public Key Infrastructure (PKI)
• Network Device Enrollment Service (NDES)
• Certificate Enrollment Policy (CEP)
• Certificate Enrollment Services (CES)
• Active Directory
• Windows Server 2016/2022
• Certificate template design and deployment
• Enterprise PKI architecture and implementation
• Technical design documentation
• Build and deployment documentation
• Security-focused infrastructure design

Scope Includes

High-level design document for AD CS environment including Linux coexistence features such as NDES

Design and configuration of certificate templates for:

• Web Server certificates
• Server-to-Server encryption
• Domain Controllers for secure LDAP/GC
• iGEL certificates
• Application certificates

• Deployment of:

• 1 x Offline Root CA
• 4 x Issuing CAs
• Up to 4 x NDES Servers

• Certificate template configuration and testing
• PKI deployment review and assurance

Soft Skills

Strong stakeholder engagement skills

Ability to lead discovery and design workshops

Excellent documentation and communication skills

Experience working in secure and highly regulated environments

Strong troubleshooting and problem-solving capability

Ability to work independently and lead technical delivery workstreams

Experience delivering structured handovers and operational documentation