PKI Engineer

Moving enterprise certificate services onto a new platform takes more than a straightforward migration - the integrations, automation and security controls all need to work when they reach live operation. As a PKI Engineer, you’ll take a migration already in motion and help deliver an enterprise PKI as a Service platform built around AppViewX.

You’ll work closely with the lead technical specialist, building integrations, automating certificate workflows and solving the practical challenges that emerge as applications move onto the new service. This is hands-on delivery work where you’ll have the opportunity to see what you build progress into live operation during the six-month assignment.

What’s in it for you

• £650-£700 per day, outside IR35
• Six-month contract working on an active enterprise PKIaaS migration
• Hybrid working from Leeds, London or Edinburgh
• Hands-on involvement with AppViewX and enterprise certificate infrastructure
• Opportunity to take engineering work from build and integration through to live operation
• Exposure to certificate authorities, HSMs, offline root CAs and key ceremony activities

Your responsibilities as PKI Engineer

• Roll out the managed PKI platform and migrate certificate services and their consumers
• Build integrations supporting certificate issuance, renewal and ongoing management
• Automate certificate workflows to support secure and reliable service operation
• Work with certificate authorities, HSMs and offline root CAs as part of the wider infrastructure
• Support the operational aspects of the service, including relevant governance activities
• Contribute to key ceremonies and resolve technical issues arising throughout the migration

• Recent hands-on experience building, migrating or operating enterprise PKI services
• Practical certificate platform integration and automation experience, ideally involving Microsoft AD CS or AWS Certificate Manager
• Working knowledge of cloud infrastructure and enterprise security environments
• AppViewX experience, or experience delivering a comparable platform such as Entrust, DigiCert or Keyfactor
• Exposure to technologies or services such as Thales Luna HSMs, Google Trust Services or GlobalSign would be advantageous