Job Description

Location: Remote (UK)
Client: UK Ministry of Defence - DLIS Programme
Start Date: ASAP
Contract End Date: 31/10/2026 (Strong likelihood of extension)
Engagement: Inside IR35 / Umbrella
Rate: Open
Security Clearance: Active SC Clearance Required
Nationality Requirement: Sole UK Nationals Only

We are seeking an experienced PKI & Secrets Management Contractor to join the Defence Logistics Information Services (DLIS) programme, a major UK Ministry of Defence transformation delivering SAP S/4HANA on AWS (MODCloud).
The successful candidate will be responsible for the design and implementation of the cryptography, certificate management and secrets management capabilities that underpin the platform. This role will address critical gaps in PKI, certificate lifecycle management and cryptographic architecture, ensuring secure, scalable and supportable solutions that meet both current programme requirements and future deployed operating models.
You will define certificate use cases, trust models, key hierarchies, encryption standards, secrets handling processes and operational runbooks, while leading the implementation and integration of PKI and secrets management services across AWS, RHEL, SAP, DevOps pipelines and privileged access management controls.
This is an excellent opportunity to work on a high-profile Defence programme with strong extension potential beyond the initial contract term.

• Design and implement enterprise PKI and secrets management capabilities.
• Define certificate lifecycle management processes, trust models and key hierarchies.
• Establish cryptographic standards, encryption controls and secrets handling procedures.
• Lead the implementation and integration of PKI and secrets management services across:
  • AWS (MODCloud)
  • SAP S/4HANA
  • RHEL environments
  • DevOps pipelines
  • Privileged Access Management (PAM) platforms
• Implement secure automation for certificate, key and secrets management.
• Develop governance models, operational processes and support runbooks.
• Collaborate with security, cloud, infrastructure and application teams to deliver secure-by-design solutions.
• Provide technical leadership on cryptography, PKI architecture and secrets management best practice.

• Strong experience designing and implementing PKI and cryptographic services within complex enterprise environments.
• Expertise in:
  • Certificate lifecycle management
  • Key management and key hierarchies
  • Trust models and certificate authorities
  • Encryption technologies and cryptographic controls
• Hands-on experience with enterprise secrets management platforms.
• Strong experience with HashiCorp Vault.
• Experience integrating PKI and secrets management solutions across cloud environments.
• AWS security and cloud security best practice knowledge.
• Experience working within Linux environments, ideally RHEL.
• Ability to produce high-quality technical designs, documentation and operational processes.

• SAP S/4HANA programmes.
• MOD, Defence, Government or highly regulated environments.
• DevSecOps and infrastructure automation.
• Privileged Access Management solutions.
• Cloud security architecture and secure-by-design principles.

Due to the nature of the programme:

• Active SC Clearance is mandatory and must already be in place.
• Sole UK Nationality is required.
• Candidates without active SC clearance cannot be considered.

If you are an experienced PKI / Secrets Management Specialist with strong HashiCorp Vault expertise and are looking to support a critical Ministry of Defence transformation programme, please apply for immediate consideration