PKI Engineer

We believe in better. And we make it happen.

Better content. Better products. And better careers.

Working in Tech, Product or Data at Sky is about building the next and the new. From broadband to broadcast, streaming to mobile, SkyQ to Sky Glass, we never stand still. We optimise and innovate.

We turn big ideas into the products, content and services millions of people love.

And we do it all right here at Sky.

What you'll do

• Operate and support the PKI solutions and environments.
• Analyse current use of certificates by individual Sky business and infrastructure teams.
• Assist onboarding new teams into the PKI service.
• Work with Cyber vulnerability assessment teams to prioritise onboarding to automated certificate management.
• Work with App Service managed certificates, private and public certificates, and certificates from Key Vault
• Manage Key Management Systems (KMS) to ensure robust cryptographic key security.
• You will support and manage the PKI and Certificate deployment and automation and Thales HSMs
• You will perform certificate lifecycle and checks, including issuing and revoking certificates.
• You will be able to support operational issues.
• Support Certificate Authority Administration, including Certificate Enrolment Web Service & Policy Web Service, and monitor Active Directory Certificate Services (ADCS)
• Be able to educate our business on cybersecurity best practice including certificate lifecycle management.

What you'll bring

• A good knowledge and understanding of Information and/or Cyber Security.
• Good written and verbal communication skills to liaise with stakeholders at varying levels of seniority across the business. Proficient in written and spoken English.
• Knowledge of cybersecurity principles and practices and an understanding of security frameworks , NIST, ISO27001.
• Experience of PKI systems and services, ACME protocol, use of RESTful APIs.
• Experience with Certificate Authority Administration, ADCS monitoring, and related tasks
• Understanding in PKI machine identity technologies such as SSH, SSL, TLS
• Experience supporting Key Management Systems (KMS) for cryptographic key security.
• Experience with:
  • PKI and Certificate deployment and automation.
  • Thales HSMs
• Good problem-solver, with the ability to tackle multiple tasks simultaneously.
• Being organised and diligent in using time and work management tools.
• A self-starter that is keen to get involved in teamwork, has strong interpersonal skills, and is hard-working and flexible.
• An ability to work independently toward achieving a common vision for Network Security at Sky and in establishing and maintaining relations with stakeholders up to C-level across multiple departments within an Enterprise environment.
• Open mind to learn new technologies, ability to analyse technical workflows and identify weak spots from cyber-security and operational point of views.
• Invested in a culture to self-learn and grow additional skillsets.
• Be curious to learn and share learnings and knowledge with the wider team.

Team overview

Cyber Security

Our products, platforms and technologies are constantly evolving that's why keeping Sky safe from cyber-attacks is one of our top priorities. Our Cyber Security team helps the business grow while protecting our customers, colleagues and partners from increasingly sophisticated cyber threats. Our team includes Cyber Fusion Centre, Security Services, Risk and Compliance, Programme Delivery and Business Security, and we work across the UK, Italy and Germany. Join us and you'll get involved in tackling challenges and future threats in an ever-changing cyber landscape.

The rewards

There's one thing people can't stop talking about when it comes to : the perks. Here's a taster:

• Sky Q, for the TV you love all in one place
• The magic of Sky Glass at an exclusive rate
• A generous pension package
• Private healthcare
• Discounted mobile and broadband
• A wide range of Sky VIP rewards and experiences

Inclusion & how you'll work

We are a Disability Confident Employer, and welcome and encourage applications from all candidates. We will look to ensure a fair and consistent experience for all, and will make reasonable adjustments to support you where appropriate. Please flag any adjustments you need to your recruiter as early as you can.

We've embraced hybrid working and split our time between unique office spaces and the convenience of working from home. You'll find out more about what hybrid working looks like for your role later on in the recruitment process.

Your office space

Osterley