***REMOTE WORKING*** ***MARKET RATES***
Project:
* Upgrading the Internal Enterprise Certificate Authority services from Windows 2012 R2 to Windows 2025.
* To migrate the Root CA services to Cloud based servers (Azure) - securing access to and from the Root CA.
* We have a requirement to get someone in to design, build and migrate our internal certificate authority, this would be for non prod and prod environments. Based on the complexity and criticality of the service, we need someone who has completed this sort of work previously and can confidently deliver the end-to-end requirements.
1. Deep understanding of Active Directory Certificate Services (AD CS) components, including Enterprise CAs, AIA/CDP paths, OCSP, CRLs, templates, and auto enrollment.
2. Ability to analyse and reproduce CA configuration settings.
3. Knowledge of Enterprise Admin / Domain Admin permission models required for CA operations.
4. Competency with Certutil, PowerShell, and the Certification Authority console for backing up and restoring CA keys, database, and registry settings.
5. Installing and configuring Windows Server 2025 roles (specifically AD CS) without misconfiguring the CA during migration.
6. Managing server services, registry operations, and file system security.
7. Understanding of networking prerequisites (OCSP, CRL distribution & AIA paths).
8. Understanding of InTune Certificate Connector and certificate requirements for AutoPilot Laptops.
Activities -
Review upgrade documentation and feasibility, identifying off-line root CA suggestions.
Create the upgrade documentation including CRL and Issuing CA Server update procedures.
Implement the upgrade following Change Procedures.
Implement InTune Certificate Policies for AutoPilot Laptops.
Decommission of existing Windows 2012 R2 PKI infrastructures.
Training of new PKI system to Tech Ops team.
Capabilities -
Knowledge of Microsoft Certificate Services and technologies used within Internal Certificate Authority.
Project Management experience.
Active Directory Management experience.
Microsoft Certificate Security experience.
LA International is an award-winning partner of choice for many of the world's most influential companies and government organisations. Holding Enhanced Government Security Accreditation, we are recognised as the European market leader in the delivery of Security Cleared talent to organisations that demand the very highest levels of security, compliance and assurance.
A multiple award-winning organisation, having secured the prestigious Queens Award for Enterprise: International Trade over consecutive years. We are committed to fostering an inclusive, equitable and accessible workplace where everyone feels valued and supported. We welcome applications from all individuals, regardless of background or identity, and we encourage candidates who may not meet every listed requirement to still apply. If you require any adjustments or support during the recruitment process, please let us know and we will work with you to ensure a fair and accessible experience.
Please Note: If a high volume of applications is received, only candidates shortlisted will be contacted.
