Cloud Security Engineer

Salary: £30,000 - 60,000 per year

Requirements

• We are looking for an experienced Cloud Security Engineer with strong Azure PKI expertise.
• We need deep experience with Azure Key Vault, including certificates, keys, RBAC, private endpoints, and rotation.
• We require a strong understanding of PKI fundamentals, including CA hierarchy, CRL/OCSP, certificate issuance, and revocation.
• We are seeking proven experience in certificate lifecycle automation.
• We need strong knowledge of TLS and mTLS implementation.
• We require experience integrating security into cloud platforms and CI/CD pipelines.
• Experience with DigiCert or a similar enterprise PKI provider would be beneficial.
• Exposure to AKS, Application Gateway, and API security would be an advantage.
• Understanding of hybrid PKI environments, such as AD CS integration, would be helpful.

Responsibilities

• We will implement and integrate an enterprise PKI solution within Azure.
• We will configure Azure Key Vault for certificate and key management.
• We will enable certificate lifecycle management, including issuance, renewal, and automation.
• We will support TLS enforcement and mTLS implementation across services.
• We will integrate certificates into Azure services and CI/CD pipelines.
• We will support secure onboarding of platforms including AKS, Application Gateway, and APIs.
• We will assess and support hybrid PKI integration where applicable.
• We will define and enforce certificate governance standards, including certificate policy, revocation, and auditing requirements.
• We will produce clear, client-ready documentation and implementation standards.

Technologies

• API
• Azure
• CI/CD
• Cloud
• Support
• RBAC
• Security

More

We are hiring a Cloud Security Engineer for a short-term contract running through to the end of June 2026. This is an inside IR35, fully remote role with an ASAP start. The position is delivery-focused and hands-on, and offers the opportunity to work on a predefined enterprise PKI solution within Azure, supporting secure certificate management and the onboarding of key platforms.

last updated 19 week of 2026