PKI Engineer

Take a PKI migration already in motion and help roll out an enterprise PKI as a Service (PKIaaS) platform. You’ll build the integrations, automate certificate workflows and solve the practical problems that arise as applications move onto the new service.

The team is migrating to AppViewX. You’ll work closely with its lead PKI engineer on the rollout, with the chance to see your work move from build into live operation during this six month assignment. It’s a hands‑on role for an engineer who enjoys getting systems working securely and reliably.

The work

• Roll out the managed PKI platform and migrate certificate services and their consumers.
• Build the integrations and automation behind certificate issuance, renewal and management.
• Work with certificate authorities, HSMs and offline root CAs, and help operate the service. There is some governance and key ceremony work alongside the engineering.

What you’ll bring

• Recent hands‑on experience building, migrating or operating enterprise PKI services.
• Practical certificate platform integration and automation experience, ideally involving Microsoft AD CS or AWS Certificate Manager (ACM).
• A working knowledge of cloud infrastructure and the confidence to deliver alongside a technical team.

AppViewX experience would be a real advantage, though experience delivering a comparable platform such as Entrust, Digi Cert or Keyfactor is welcome. Thales Luna HSMs, Google Trust Services and Global Sign are useful additional experience.

You can be based around Leeds, London or Edinburgh and work on a hybrid basis. You’ll need to be eligible for SC clearance.