Senior PKI Engineer

OFGEM
Ofgem is a non-ministerial government department and an independent National Regulatory Authority. Our principal objective is to protect the interests of existing and future electricity and gas consumers. We do this by promoting value for money, promoting security of supply and sustainability, for present and future generations of consumers, domestic and industrial users, the supervision and development of markets and competition, regulation and the delivery of government schemes. We work effectively with, but are independent of, government, the energy industry and other stakeholders within a legal framework determined by the UK government and the European Union.

We are building a Digital, Data and Technology (DDaT) driven organisation at Ofgem and will lead industry by showcasing best practice when dealing with data, digital and technology in the energy sector. Our more modern, insight-driven, innovative approach to DDaT will provide outstanding experiences at the right cost, quality and pace for the whole of Ofgem and ensure consumers receive a top-quality and cost-effective supply of energy.

Key Responsibilities

• Manage Certificate Authority Administration, including Certificate Enrolment Web Service & Policy Web Service, and monitor Active Directory Certificate Services (ADCS).
• Manage Azure key management services to ensure robust cryptographic key security.
• Support the delivery of Sectigo Certificate Manager (SCM) to manage the lifecycles of digital certificates
• Understand details of existing certificate use-cases and prepare onboarding roadmaps to the new PKI service.
• Participate in the technical support of the PKI managed service for Ofgem as well perform certificate checks, including issuing and revoking certificates.
• Work with App Service managed certificates, private and public certificates, and certificates from Key Vault.

Person specification

Key Outputs and Deliverables

• Work within CDIO function to refresh, design, build, and operate PKI solutions and environments.
• Work with Cyber vulnerability assessment teams to prioritise onboarding to automated certificate management by bringing in your technology understanding.
• Provide technical administration for the SharePoint Online and Power Platform services ensuring end user access is automatable, auditable, and manageable.
• Plan and manage all technical elements of the PKI service and DLP policies to ensure a sustainable service model is developed.
• Provide documentation and resources to colleagues across Information Services, ensuring that all services are fully supported, and end users have access to appropriate technical support and information.
• Maintain and launch a platform to manage the lifecycles of digital certificates to secure identity across our enterprise.

Essential Criteria

• Hands on experience with PKI and Certificate deployment and automation. (Lead criteria)
• Expertise in PKI machine identity technologies such as SSH, SSL, TLS.
• Experience managing Key Management Systems (KMS) for cryptographic key security.
• Good understanding of PKI systems and services, ACME protocol, Online Certificate Status Protocol and the use of RESTful APIs.
• hands-on experience with Certificate Authority Administration, ADCS monitoring, and related tasks.

Desirable Criteria

• A deep knowledge and understanding of Information and/or Cyber Security. Knowledge of cybersecurity principles and practices and an understanding of security frameworks e.g., NIST, ISO27001.

Behaviours

We’ll assess you against these behaviours during the selection process:

• Changing and Improving
• Working Together
• Delivering at Pace

Technical skills

We’ll assess you against these technical skills during the selection process:

• Please refer to the Candidate Pack and Role Profile attached for full details.

Benefits

Alongside your salary of £43,650, OFGEM contributes £11,785 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.

Ofgem can offer you a comprehensive and competitive benefits package which includes; 30 days annual leave after 2 years; Excellent training and development opportunities; The opportunity to join the generous Civil Service pension which also includes a valuable range of benefits; Hybrid working (currently 1 day a week in the office but is in review), flexible working hours and family friendly policies. Plus lots of other benefits including clean and bright offices based centrally, engaged networks and teams and an opportunity to contribute to our ambitious and important targets of establishing a Net Zero energy system by 2050. This exciting blend of professional challenge and personal reward identifies career opportunities at Ofgem as something to get excited about.

Things you need to know

Selection process details

This vacancy is using Success Profiles (opens in a new window) , and will assess your Behaviours, Experience and Technical skills.

When you press the ‘Apply now’ button, you will be asked to complete personal details (not seen by the sift panel), and upload a copy of your CV anonymising all details where necessary.

You will then be asked to supply a personal statement evidencing how you meet the essential and desirable skills and capabilities listed in the role profile. Please ensure you demonstrate clearly, within these answers how you meet each of the essential and desirable skills and capabilities.

The Civil Service values honesty and integrity and expect all candidates to abide by these principles. Ofgem take any incidences of cheating very seriously. Please ensure all examples provided are of your own experience. Any instances of plagiarism or other forms of cheating will be investigated and, if proven, the relevant applications will be withdrawn from the process.

Feedback will only be provided if you attend an interview or assessment.

Security

Successful candidates must undergo a criminal record check.

People working with government assets must complete baseline personnel security standard (opens in new window) checks.

Nationality requirements

This job is broadly open to the following groups:

• UK nationals
• nationals of the Republic of Ireland
• nationals of Commonwealth countries who have the right to work in the UK
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
• Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

Further information on nationality requirements (opens in a new window)

Working for the Civil Service

The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission’s recruitment principles (opens in a new window) .

The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.

The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.