PKI Engineer

TEAM; City of Westminster; Hybrid; GBP 120,000 - 129,000; Full time

Benefits offered by this job

Hybrid work locations: Leeds/London/Ed

Job summary

TEAM is seeking a PKI Engineer to continue a live enterprise PKIaaS migration. You will roll out the platform, build integrations for certificate issuance and renewal, and automate workflows to ensure secure, reliable operation. You will collaborate with CAs, HSMs and offline root CAs throughout the migration.

You will contribute to governance, participate in key ceremonies, and help deliver a robust PKI service on a six-month contract with hybrid working from multiple UK cities.

Qualifications

• Hands-on experience building or migrating enterprise PKI services.
• Experience with certificate platform integration and automation, e.g., AD CS or AWS ACM.
• Knowledge of cloud infrastructure and enterprise security environments.
• AppViewX experience or similar PKI platforms.
• Exposure to Thales Luna HSMs, Google Trust Services or GlobalSign is a plus.

Responsibilities

• Roll out the managed PKI platform and migrate certificate services and consumers.
• Build integrations supporting certificate issuance, renewal and ongoing management.
• Automate certificate workflows to support secure and reliable service operation.
• Work with certificate authorities, HSMs and offline root CAs as part of the wider infrastructure.
• Support the operational aspects of the service, including governance activities.
• Contribute to key ceremonies and resolve technical issues arising during migration.

Skills

PKI hands-on

Certificate automation

Cloud infrastructure

AppViewX

PKI integration

Tools

AppViewX

Entrust

DigiCert

Keyfactor

AD CS / AWS ACM

Job description

Moving enterprise certificate services onto a new platform takes more than a straightforward migration - the integrations, automation and security controls all need to work when they reach live operation. As a PKI Engineer, you'll take a migration already in motion and help deliver an enterprise PKI as a Service platform built around AppViewX.

You'll work closely with the lead technical specialist, building integrations, automating certificate workflows and solving the practical challenges that emerge as applications move onto the new service. This is hands‑on delivery work where you'll have the opportunity to see what you build progress into live operation during the six-month assignment.

What's in it for you

• £650-£700 per day, outside IR35
• Six‑month contract working on an active enterprise PKIaaS migration
• Hybrid working from Leeds, London or Edinburgh
• Hands‑on involvement with AppViewX and enterprise certificate infrastructure
• Opportunity to take engineering work from build and integration through to live operation
• Exposure to certificate authorities, HSMs, offline root CAs and key ceremony activities

Your responsibilities as PKI Engineer

• Roll out the managed PKI platform and migrate certificate services and their consumers
• Build integrations supporting certificate issuance, renewal and ongoing management
• Automate certificate workflows to support secure and reliable service operation
• Work with certificate authorities, HSMs and offline root CAs as part of the wider infrastructure
• Support the operational aspects of the service, including relevant governance activities
• Contribute to key ceremonies and resolve technical issues arising throughout the migration

What we're looking for in a PKI Engineer

• Recent hands‑on experience building, migrating or operating enterprise PKI services
• Practical certificate platform integration and automation experience, ideally involving Microsoft AD CS or AWS Certificate Manager
• Working knowledge of cloud infrastructure and enterprise security environments
• AppViewX experience, or experience delivering a comparable platform such as Entrust, DigiCert or Keyfactor
• Exposure to technologies or services such as Thales Luna HSMs, Google Trust Services or GlobalSign would be advantageous

You’ll need to be eligible for SC clearance to be considered for this assignment.