PKI Engineer

Experis - ManpowerGroup; City Of London; Remote; GBP 80,000 - 100,000; Full time

Job summary

A leading company seeks a PKI Engineer for a 5-month contract, responsible for the design and management of Public Key Infrastructure (PKI) solutions. The role involves hands-on experience with HSMs, collaborating with cybersecurity teams, and ensuring compliance with security standards. Ideal candidates will demonstrate expertise in PKI architecture and security best practices, with a strong background in cryptography and enterprise environments.

Qualifications

• Strong expertise in PKI architecture and security best practices.
• Deep knowledge of PKCS#11 and certificate management.
• Experience in Smart Metering projects or regulated industries is a plus.

Responsibilities

• Lead the architecture and design of PKI solutions.
• Manage Hardware Security Modules (HSMs) and secure key management.
• Oversee migration of legacy PKI to modern solutions.

Skills

PKI architecture

HSM management

Public-Key Cryptography Standards

Cyber security architecture

Tools

KeyFactor PKI

Thales Luna HSM

MS Azure HSM

Marvell LiquidSecurity HSM

Job description

PKI Engineer
Remote
5 months - extensions
£720 per day inside ir35 - umbrella only

Role overview:

• Lead the architecture, design, and operations of Public Key Infrastructure (PKI) solutions.
• Manage Hardware Security Modules (HSMs), ensuring secure cryptographic key management.
• Oversee the migration of legacy PKI to a modern replacement solution.
• Implement Public-Key Cryptography Standards (PKCS#11), chains of trust, and Certificate Signing Requests (CSRs).
• Collaborate with cybersecurity teams to integrate PKI into broader security architecture.
• Provide hands-on expertise with HSMs, ensuring compliance with security standards.

Key Skills & Experience:

• Strong expertise in PKI architecture, operations, and security best practices.
• Hands-on experience with HSMs in enterprise environments.
• Deep knowledge of PKCS#11, certificate management, and trust models.
• Cyber security architecture experience, ensuring secure digital communications.
• Previous involvement in Smart Metering projects or regulated industries is a plus.

Desired

• KeyFactor PKI
• Thales Luna HSM
• MS Azure HSM
• Marvell LiquidSecurity HSM
• mTLS,
• HMAC

All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply!