PKI Engineer

Candidate Source - TEAM; City Of London; Hybrid; GBP 120,000 - 129,000; Full time

Benefits offered by this job

Hybrid working from Leeds

Hybrid working from London

Hybrid working from Edinburgh

Job summary

Candidate Source - TEAM is seeking a PKI Engineer to continue and complete an enterprise PKI as a Service migration built around AppViewX. You will deliver hands-on integration, automate certificate workflows and support live operation through the six-month assignment.

The role offers hybrid working from Leeds, London or Edinburgh with a daily rate of £650-£700 outside IR35 and a focus on secure, scalable certificate infrastructure delivery.

Qualifications

• Hands-on experience building, migrating or operating enterprise PKI services.
• Certificate platform integration and automation experience (AD CS or AWS ACM).
• Familiar with cloud infrastructure and enterprise security environments.
• AppViewX experience or comparable PKI platforms.

Responsibilities

• Roll out the managed PKI platform and migrate certificate services and their consumers.
• Build integrations supporting certificate issuance, renewal and ongoing management.
• Automate certificate workflows to support secure and reliable service operation.
• Work with certificate authorities, HSMs and offline root CAs as part of the wider infrastructure.
• Support the operational aspects of the service, including governance activities.
• Contribute to key ceremonies and resolve technical issues during migration.

Skills

Enterprise PKI

Certificate automation

Cloud security

AppViewX

Vendor PKI platforms

HSM exposure

Tools

AppViewX

Microsoft AD CS

AWS Certificate Manager

Thales Luna HSMs

Google Trust Services

GlobalSign

Job description

Moving enterprise certificate services onto a new platform takes more than a straightforward migration - the integrations, automation and security controls all need to work when they reach live operation. As a PKI Engineer, you'll take a migration already in motion and help deliver an enterprise PKI as a Service platform built around AppViewX.

You'll work closely with the lead technical specialist, building integrations, automating certificate workflows and solving the practical challenges that emerge as applications move onto the new service. This is hands-on delivery work where you'll have the opportunity to see what you build progress into live operation during the six-month assignment.

What's in it for you

• £650-£700 per day, outside IR35
• Six-month contract working on an active enterprise PKIaaS migration
• Hybrid working from Leeds, London or Edinburgh
• Hands-on involvement with AppViewX and enterprise certificate infrastructure
• Opportunity to take engineering work from build and integration through to live operation
• Exposure to certificate authorities, HSMs, offline root CAs and key ceremony activities

Your responsibilities as PKI Engineer

• Roll out the managed PKI platform and migrate certificate services and their consumers
• Build integrations supporting certificate issuance, renewal and ongoing management
• Automate certificate workflows to support secure and reliable service operation
• Work with certificate authorities, HSMs and offline root CAs as part of the wider infrastructure
• Support the operational aspects of the service, including relevant governance activities
• Contribute to key ceremonies and resolve technical issues arising throughout the migration

What we're looking for in a PKI Engineer

• Recent hands-on experience building, migrating or operating enterprise PKI services
• Practical certificate platform integration and automation experience, ideally involving Microsoft AD CS or AWS Certificate Manager
• Working knowledge of cloud infrastructure and enterprise security environments
• AppViewX experience, or experience delivering a comparable platform such as Entrust, DigiCert or Keyfactor
• Exposure to technologies or services such as Thales Luna HSMs, Google Trust Services or GlobalSign would be advantageous

You'll need to be eligible for SC clearance to be considered for this assignment.