PKI Engineer

TalentTrade Recruitment Limited; United Kingdom; Hybrid; GBP 70,000 - 100,000; Full time

Job summary

TalentTrade Recruitment Limited is seeking a PKI engineer to help roll out an enterprise PKI as a Service platform. You’ll build integrations, automate certificate workflows and solve practical problems as applications move onto the new service.

Based in the UK with hybrid work (Leeds, London or Edinburgh), you’ll work with the lead PKI engineer on a six-month assignment and be eligible for SC clearance.

Qualifications

• Recent hands-on experience building, migrating or operating enterprise PKI services.
• Practical certificate platform integration and automation experience, ideally involving Microsoft AD CS or AWS Certificate Manager (ACM).
• A working knowledge of cloud infrastructure and the confidence to deliver alongside a technical team.

Responsibilities

• Roll out the managed PKI platform and migrate certificate services and their consumers.
• Build the integrations and automation behind certificate issuance, renewal and management.
• Work with certificate authorities, HSMs and offline root CAs, and help operate the service.

Skills

Enterprise PKI experience

Certificate workflow automation

Cloud infrastructure knowledge

Tools

AppViewX

Microsoft AD CS

AWS Certificate Manager (ACM)

Job description

Take a PKI migration already in motion and help roll out an enterprise PKI as a Service (PKIaaS) platform. You’ll build the integrations, automate certificate workflows and solve the practical problems that arise as applications move onto the new service.

The team is migrating to AppViewX. You’ll work closely with its lead PKI engineer on the rollout, with the chance to see your work move from build into live operation during this six month assignment. It’s a hands‑on role for an engineer who enjoys getting systems working securely and reliably.

The work

• Roll out the managed PKI platform and migrate certificate services and their consumers.
• Build the integrations and automation behind certificate issuance, renewal and management.
• Work with certificate authorities, HSMs and offline root CAs, and help operate the service. There is some governance and key ceremony work alongside the engineering.

What you’ll bring

• Recent hands‑on experience building, migrating or operating enterprise PKI services.
• Practical certificate platform integration and automation experience, ideally involving Microsoft AD CS or AWS Certificate Manager (ACM).
• A working knowledge of cloud infrastructure and the confidence to deliver alongside a technical team.

AppViewX experience would be a real advantage, though experience delivering a comparable platform such as Entrust, DigiCert or Keyfactor is welcome. Thales Luna HSMs, Google Trust Services and GlobalSign are useful additional experience.

You can be based around Leeds, London or Edinburgh and work on a hybrid basis. You’ll need to be eligible for SC clearance.