Certificate Deployment Engineer

Job Title: Certificate Deployment Engineer

Location: Maidenhead, United Kingdom

Availability: Immediate Joiners Preferred

Position Type: Full-time

Experience Level: 5 years.

Role Purpose

We are looking for a hands‑on Certificate Deployment Engineer to support the assessment, testing and implementation of internal certificate management across an on‑premise Microsoft server estate.

Key Responsibilities

• Server and Environment Discovery
  • Review Windows Server estate in scope for certificate management.
  • Confirm domain membership, server roles, operating system versions and environment classification.
  • Identify certificate stores, current certificates, expiry dates, issuers and bindings.
  • Support creation of a server‑to‑certificate mapping.
  • Identify dependencies between servers, applications, SQL, reporting services and internal HTTPS endpoints.
• Support review of DMZ/workgroup servers and any constraints around access, trust and certificate deployment.
• Certificate Deployment and Binding
  • Install and configure certificates on Windows Servers.
  • Validate certificate chains and trusted root/intermediate CA installation.
  • Configure or support certificate bindings for IIS, internal web services, SSRS, SQL Server and application services.
  • Support testing of certificate auto‑enrolment through Group Policy for domain‑joined servers.
  • Support manual or scripted certificate deployment for non‑domain‑joined servers.
  • Troubleshoot certificate store, private key, permissions, binding and service restart issues.
• Active Directory and GPO Support
  • Assist with Group Policy configuration and validation for certificate auto‑enrolment.
  • Confirm target servers receive correct GPO settings.
  • Validate certificate template permissions and enrolment rights from a server perspective.
  • Support AD security group mapping for certificate enrolment.
  • Troubleshoot GPO application and enrolment failures.
• Testing and Validation
  • Execute technical validation after certificate deployment.
  • Confirm internal HTTPS services are accessible and trusted.
  • Confirm SQL Server and SSRS continue to operate after certificate changes.
  • Validate application portal access and internal server‑to‑server connectivity.
  • Support vulnerability scan remediation checks where required.
  • Capture test evidence before and after certificate changes.
  • Support rollback or fix‑forward actions if certificate changes cause issues.
• Operational Documentation
  • Produce step‑by‑step implementation notes and server‑level runbooks.
  • Document certificate installation and renewal procedures.
  • Document troubleshooting steps for common certificate issues.
  • Support creation of BAU operational procedures for certificate renewal.
  • Capture evidence for audit and change management.
  • Support handover to Pobal operational teams.

Required Skills And Experience

• Windows Server – Strong hands‑on experience administering Windows Server environments.
• Active Directory – Good understanding of AD, domain membership, GPOs, security groups and service accounts.
• Certificates – Practical experience installing, renewing, binding and troubleshooting certificates on Windows Servers.
• Certificate stores – Understanding of local machine certificate stores, trusted roots, intermediates and private keys.
• IIS / web services – Experience configuring HTTPS bindings and certificate assignments.
• GPO troubleshooting – Ability to validate and troubleshoot Group Policy application.
• PowerShell – Ability to use PowerShell for certificate discovery, export, import, validation and reporting.
• Infrastructure troubleshooting – Strong troubleshooting skills across Windows services, event logs, connectivity and permissions.
• Change‑controlled environments – Experience working through planned changes, test evidence and production maintenance windows.
• Documentation – Ability to write clear implementation steps and operational runbooks.

Desirable Skills

• Experience with Microsoft AD CS and certificate auto‑enrolment.
• Experience with SQL Server certificate configuration.
• Experience with SQL Server Reporting Services certificate bindings.
• Experience supporting DMZ or workgroup Windows servers.
• Experience with public and private certificates, wildcard certificates and SAN certificates.
• Experience with vulnerability scan remediation.
• Experience supporting 24/7 production systems.
• Experience with monitoring and alerting tools.
• Experience in public sector, regulated or ISO 27001‑aligned environments.

#J-18808-Ljbffr…