Enterprise PKI Platform Engineer – Hybrid Contract

TEAM; City of Westminster; Hybrid; GBP 120,000 - 129,000; Full time

Benefits offered by this job

Hybrid work locations: Leeds/London/Ed

Job summary

TEAM is seeking a PKI Engineer to continue a live enterprise PKIaaS migration. You will roll out the platform, build integrations for certificate issuance and renewal, and automate workflows to ensure secure, reliable operation. You will collaborate with CAs, HSMs and offline root CAs throughout the migration.

You will contribute to governance, participate in key ceremonies, and help deliver a robust PKI service on a six-month contract with hybrid working from multiple UK cities.

Qualifications

• Hands-on experience building or migrating enterprise PKI services.
• Experience with certificate platform integration and automation, e.g., AD CS or AWS ACM.
• Knowledge of cloud infrastructure and enterprise security environments.
• AppViewX experience or similar PKI platforms.
• Exposure to Thales Luna HSMs, Google Trust Services or GlobalSign is a plus.

Responsibilities

• Roll out the managed PKI platform and migrate certificate services and consumers.
• Build integrations supporting certificate issuance, renewal and ongoing management.
• Automate certificate workflows to support secure and reliable service operation.
• Work with certificate authorities, HSMs and offline root CAs as part of the wider infrastructure.
• Support the operational aspects of the service, including governance activities.
• Contribute to key ceremonies and resolve technical issues arising during migration.

Skills

PKI hands-on

Certificate automation

Cloud infrastructure

AppViewX

PKI integration

Tools

AppViewX

Entrust

DigiCert

Keyfactor

AD CS / AWS ACM

Job description

TEAM is seeking a PKI Engineer to continue a live enterprise PKIaaS migration. You will roll out the platform, build integrations for certificate issuance and renewal, and automate workflows to ensure secure, reliable operation. You will collaborate with CAs, HSMs and offline root CAs throughout the migration.

You will contribute to governance, participate in key ceremonies, and help deliver a robust PKI service on a six-month contract with hybrid working from multiple UK cities.