PKI Engineer

Moving enterprise certificate services onto a new platform takes more than a straightforward migration – the integrations, automation and security controls all need to work when they reach live operation. As a PKI Engineer, you’ll take a migration already in motion and help deliver an enterprise PKI as a Service platform built around AppViewX. You’ll work closely with the lead technical specialist, building integrations, automating certificate workflows and solving the practical challenges that emerge as applications move onto the new service. This is hands-on delivery work where you’ll have the opportunity to see what you build progress into live operation during the six-month assignment. What’s in it for you £650–£700 per day, outside IR35 Six-month contract working on an active enterprise PKIaaS migration Hybrid working from Leeds, London or Edinburgh Hands-on involvement with AppViewX and enterprise certificate infrastructure Opportunity to take engineering work from build and integration through to live operation Exposure to certificate authorities, HSMs, offline root CAs and key ceremony activities Your responsibilities as PKI Engineer Roll out the managed PKI platform and migrate certificate services and their consumers Build integrations supporting certificate issuance, renewal and ongoing management Automate certificate workflows to support secure and reliable service operation Work with certificate authorities, HSMs and offline root CAs as part of the wider infrastructure Support the operational aspects of the service, including relevant governance activities Contribute to key ceremonies and resolve technical issues arising throughout the migration What we’re looking for in a PKI Engineer Recent hands-on experience building, migrating or operating enterprise PKI services Practical certificate platform integration and automation experience, ideally involving Microsoft AD CS or AWS Certificate Manager Working knowledge of cloud infrastructure and enterprise security environments AppViewX experience, or experience delivering a comparable platform such as Entrust, DigiCert or Keyfactor Exposure to technologies or services such as Thales Luna HSMs, Google Trust Services or GlobalSign would be advantageous You’ll need to be eligible for SC clearance to be considered for this assignment. If you have strong enterprise PKI experience and want to help take a major platform migration through to live operation, apply now for the PKI Engineer contract. Candidate Source Ltd is an advertising agency. Once you have submitted your application it will be passed to the third party Recruiter who is responsible for processing your application. This will include holding and sharing your personal data, our legal basis for this is legitimate interest subject to your declared interest in a job. Our privacy policy can be found on our website and we can be contacted to confirm who your application has been forwarded to.