PKI Engineer at TalentTrade Recruitment, London, 6 Months, £650-£700 per day

PKI Engineer
Six month contract
£650-£700 per day outside IR35
Leeds, London or Edinburgh Hybrid
SC eligibility required
Take a PKI migration already in motion and help roll out an enterprise PKI as a Service (PKIaaS) platform.

You've migrated enterprise PKI services, automated certificate workflows and worked directly with the infrastructure protecting CA keys. Here, you'll put that experience into a live migration to AppViewX, helping build a service that works across a large enterprise.

Working alongside the lead PKI engineer, you'll take on practical engineering across platform rollout, application integrations and certificate lifecycle automation. Your work will connect the new platform to the systems that depend on it, while maintaining secure, reliable certificate services.

Build, migrate and automate
You'll help migrate existing certificate services, integrate application and cloud workloads, and improve how certificates are issued, deployed, renewed and managed.

The scope extends to certificate authorities, HSMs and offline root CAs, including operational support and key ceremonies where required. You'll need to be comfortable working across both certificate lifecycle tooling and the underlying PKI infrastructure.

The experience that matters
You'll bring recent, hands-on enterprise PKI delivery experience and be able to explain what you personally configured, migrated, automated and troubleshot.
Your experience should include:

• PKI migration and implementation, taking workloads through to a working service.
• Certificate services and lifecycle automation, including Microsoft AD CS and integration with application or cloud environments.
• Practical HSM administration and CA key management, with direct involvement in key ceremonies and controls such as dual control and split knowledge.

AppViewX experience is particularly useful. Strong implementation experience with Venafi, DigiCert, Entrust or Keyfactor is also relevant. Thales Luna HSM experience would strengthen your fit.

You'll be based within reach of Leeds, London or Edinburgh for hybrid working and will need to be eligible for SC clearance.