Principal Consultant – Microsoft PKI Specialist

Position: Principal Consultant – Microsoft PKI Specialist Location: Remote Duration: January 2, 2025 – June 30, 2025 ( potential extension) Industry: Telecommunications Technology Focus: Software Defined Networks Responsibilities: Design, implement, and manage Microsoft Public Key Infrastructure (PKI) solutions, including Active Directory Certificate Services (AD CS) and the construction of Certification Authorities. Configure and maintain Microsoft Failover Clustering with an emphasis on AD CS, ensuring high availability and reliability. Operate Certification Authorities within failover clusters, utilizing Hardware Security Modules (HSMs) across all cluster nodes for key management. Perform comprehensive CA backup and restoration procedures, encompassing security configurations and registry key management. Administer Luna SA HSMs and Luna Key Storage Provider (KSP) Clients, establishing Luna High Availability (HA) groups for clustered HSM key management. Demonstrate in-depth knowledge of Public Key Services Active Directory containers, including Authority Information Access (AIA), Certificate Revocation List Distribution Points (CDP), and Enrollment Services. Set up and configure Certificate Enrollment Policy (CEP), Certificate Enrollment Services (CES), and Network Device Enrollment Service (NDES) endpoints for certificate distribution. Implement certificate distribution strategies using Microsoft Intune, ensuring seamless integration and deployment. Develop and maintain PowerShell scripts to automate PKI-related tasks and processes. Qualifications: Proven experience in designing and managing Microsoft PKI environments, particularly with Active Directory Certificate Services. Strong expertise in Microsoft Failover Clustering and high-availability solutions. Hands-on experience with Hardware Security Modules, specifically Luna SA HSMs and associated client software. Comprehensive understanding of Active Directory structures related to PKI, including AIA, CDP, and Enrollment Services. Familiarity with configuring CEP, CES, and NDES for certificate services. Knowledge of certificate deployment via Microsoft Intune. Proficiency in PowerShell scripting for automation purposes. Background in the telecommunications sector, with an emphasis on Software Defined Networks, is advantageous. Deliverables: Provide support for routine tasks as outlined in the task description, ensuring the stability and security of the PKI environment.

Location: UK, GB

Posted Date: 1/10/2025