PKI Engineer

TEAM; City Of London; Hybrid; GBP 120,000 - 129,000; Full time

Benefits offered by this job

Hybrid work locations

Six-month contract

AppViewX experience

Enterprise PKI migration

Job summary

TEAM is seeking a PKI Engineer to roll out a managed PKI platform and migrate certificate services in a six-month assignment, with hands-on delivery and live operation exposure. The role involves building integrations for issuance, renewal, and ongoing management, plus automating workflows for secure service operation.

You will work with certificate authorities, HSMs and offline root CAs, contributing to governance activities and key ceremonies as the migration progresses.

Qualifications

• Hands-on experience building, migrating or operating enterprise PKI services.
• Experience with certificate platform integration and automation.
• Knowledge of cloud infrastructure and enterprise security.
• AppViewX experience or similar platform delivery.
• Exposure to HSMs (e.g., Thales Luna) and root CA concepts is advantageous.

Responsibilities

• Roll out the managed PKI platform and migrate certificate services and their consumers.
• Build integrations supporting certificate issuance, renewal and management.
• Automate certificate workflows to support secure and reliable service operation.
• Work with certificate authorities, HSMs and offline root CAs as part of the wider infrastructure.
• Support the operational aspects of the service, including governance activities.
• Contribute to key ceremonies and resolve technical issues during the migration.

Skills

PKI engineering

PKI migration

Automation experience

Cloud infrastructure

AppViewX

Tools

Entrust

DigiCert

Keyfactor

Job description

Moving enterprise certificate services onto a new platform takes more than a straightforward migration – the integrations, automation and security controls all need to work when they reach live operation.

As a PKI Engineer, you’ll take a migration already in motion and help deliver an enterprise PKI as a Service platform built around AppViewX.

You’ll work closely with the lead technical specialist, building integrations, automating certificate workflows and solving the practical challenges that emerge as applications move onto the new service. This is hands‑on delivery work where you’ll have the opportunity to see what you build progress into live operation during the six‑month assignment.

What’s in it for you

• £650–£700 per day, outside IR35
• Six‑month contract working on an active enterprise PKIaaS migration
• Hybrid working from Leeds, London or Edinburgh
• Hands‑on involvement with AppViewX and enterprise certificate infrastructure
• Opportunity to take engineering work from build and integration through to live operation
• Exposure to certificate authorities, HSMs, offline root CAs and key ceremony activities

Your responsibilities as PKI Engineer

• Roll out the managed PKI platform and migrate certificate services and their consumers
• Build integrations supporting certificate issuance, renewal and ongoing management
• Automate certificate workflows to support secure and reliable service operation
• Work with certificate authorities, HSMs and offline root CAs as part of the wider infrastructure
• Support the operational aspects of the service, including relevant governance activities
• Contribute to key ceremonies and resolve technical issues arising throughout the migration

What we’re looking for in a PKI Engineer

• Recent hands‑on experience building, migrating or operating enterprise PKI services
• Practical certificate platform integration and automation experience, ideally involving Microsoft AD CS or AWS Certificate Manager
• Working knowledge of cloud infrastructure and enterprise security environments
• AppViewX experience, or experience delivering a comparable platform such as Entrust, DigiCert or Keyfactor
• Exposure to technologies or services such as Thales Luna HSMs, Google Trust Services or GlobalSign would be advantageous

You’ll need to be eligible for SC clearance to be considered for this assignment.