PKI Engineer

Salary: £? - ? per year

Requirements:

• Recent hands-on experience building, migrating or operating enterprise PKI services
• Practical certificate platform integration and automation experience, ideally involving Microsoft AD CS or AWS Certificate Manager
• Working knowledge of cloud infrastructure and enterprise security environments
• AppViewX experience, or experience delivering a comparable platform such as Entrust, DigiCert or Keyfactor
• Exposure to technologies or services such as Thales Luna HSMs, Google Trust Services or GlobalSign is advantageous
• Eligibility for SC clearance

Responsibilities:

• Roll out the managed PKI platform and migrate certificate services and their consumers
• Build integrations for certificate issuance, renewal and ongoing management
• Automate certificate workflows to support secure and reliable service operation
• Work with certificate authorities, HSMs and offline root CAs as part of the wider infrastructure
• Support operational aspects of the service, including relevant governance activities
• Contribute to key ceremonies and resolve technical issues arising throughout the migration

Technologies:

• AWS
• Cloud
• Support
• Security
• DevOps

More:

We are recruiting for a six-month PKI Engineer contract supporting an active enterprise PKI as a Service migration built around AppViewX. You will work closely with the lead technical specialist on hands-on delivery, with the opportunity to see engineering work progress from build and integration into live operation. The role offers £650–£700 per day, outside IR35, and hybrid working from Leeds, London or Edinburgh, with exposure to enterprise certificate infrastructure, certificate authorities, HSMs, offline root CAs and key ceremony activities. Candidate Source Ltd is an advertising agency; after you apply, we will pass your application to the third-party recruiter responsible for processing it, including holding and sharing your personal data on the basis of legitimate interest, subject to your declared interest in the job.

last updated 40 week of 2026