Sr. Engineer, PKI

Want to work for an industry leading employer that values diversity, equity, and inclusion? The London Stock Exchange Group is a premiere employer where excellence is rewarded! We offer an excellent benefits and compensation packages. We value healthy lifestyles and offer a substantial incentive to help cover things like gym memberships, fitness classes, bike to work schemes, etc. We offer a great office environment, work from home kit, and industry leading toolsets. Flexible work environment and a hybrid work environment that offers flexibility as well as teamwork and collaboration in the office. We strongly encourage people with disabilities and former military personnel to apply! Must pass background check and qualify for security clearances where appropriate.

You should be comfortable working with different team members (Security, Operations, Help Desk, Architecture, end user computing) to collaborate and produce positive outcomes. Combination of Operations role and implementation of projects. Need someone to mature some platforms and decom/consolidate other platforms. We have a small team of 5 highly skilled level 2 and level 3 engineers on your team. Successful candidate would have previous management experience of remote international teams, ITIL experience. You would have owned and operated production security, operations, or IAM systems for medium to large enterprises.

Role Description:

This hands-on engineering role will work with internal and external certificate management (PKI).  Work with systems like Venafi and Active Directory Certificate Services and be our authorities across multiple disciplines.  This role will meet with internal collaborators to evangelize and promote the use of these centrally managed Identity services, promote standard methodologies and advanced security controls with application owners and server support resources.  

Key Responsibilities:

Owning the success and delivery of the Identity Services strategy.   Documenting, design, policy, and procedure around all PKI Services.  Provide senior level engineering and design support.  Help deliver a comprehensive internally focused Microsoft CA, integrate this with Microsoft Intune and Auto-Pilot for mobile device management and conditional access.  Integrate certificate-based authentication with Microsoft Azure AD, Load Balancers and wireless networks, SSO and server to server communication.  Ongoing maintenance of the platform, server support, and solutions.  Design & Engineering of the solution.  Issue certificates and perform lifecycle management for external SSL/TLS Certificates.  Fix PKI Issues, create technical transition and integration plans and implement them.

Core Technical Skills (Mandatory)

• Bachelor’s degree in Technology (Computer Science, Computer Engineering etc.)
• 6 Years of experience in IT.
• 2-3 years of experience in Security or Identity & Access Management.
• Willingness to learn Microsoft Certificate Management (PKI) and associated platforms (Sectigo/Comodo, Digicert, Venafi) at a deep technical level.
• Good Project Management, inter-personal & communications skills and the ability to adapt to change, move fast, take charge, and work with ambiguity. Positive and enthusiastic attitude
• Good understanding of Security Architecture and Application Design and Integration
• Experience supporting a service, creating run books, documentation, and support.
• Scripting Experience in PowerShell or a similar language.
• Knowledge of firewalls, Load Balancers, and port/protocols involved with connectivity
• Ability to solve issues and interact with end user administrators and explain PKI

Additional Technical Skills (Preferred)

• Microsoft Certificate Services or Venafi Certificate Platform Experience
• Experience using Public and Private Certificate Authorities
• Microsoft Active Directory / Azure AD integration
• Windows Server Support
• Microsoft Azure Certifications
• AWS and Azure Cloud PKI management
• Security Certifications (CISM, CISSP, CISA, CISM, CRISC, ITIL, PMP)
• Orchestration / Kubernetes Experience
• Load Balancers and/or zScaler integrations
• Service Now experience

Non-Technical Skills, Key behaviors:

• Explain technical concepts to non-technical stakeholders
• Work as part of a team
• Manage your own workloads and work independently.
• Prior Management or Military Experience

LSEG is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth.

Our purpose is the foundation on which our culture is built. Our values of Integrity, Partnership, Excellence and Change underpin