Senior PKI Engineer / Architect

We’re connecting with experienced PKI specialists for upcoming opportunities across cybersecurity vendors, specialist consultancies and enterprise security teams. This advert is for future opportunities rather than a confirmed vacancy.

The focus is on people who can take ownership of certificate infrastructure, automate manual processes and support the transition towards more adaptable cryptographic systems.

Typical responsibilities

• Design, implement and improve enterprise PKI and certificate management infrastructure.
• Automate certificate issuance, renewal, revocation and monitoring.
• Integrate certificate services with applications, cloud platforms, devices and identity systems.
• Investigate certificate failures and resolve issues affecting authentication and service availability.
• Assess existing cryptographic dependencies and support PQC readiness and migration planning.
• Translate security requirements into practical designs, documentation and delivery plans.

Relevant experience

• Hands-on delivery of PKI systems, with ownership beyond routine administration.
• Strong understanding of X.509, certificate authorities, trust chains, TLS and mutual TLS.
• Experience with platforms such as Microsoft AD CS, EJBCA, Keyfactor, AppViewX or equivalent.
• Scripting and automation using PowerShell, Python or similar.
• Experience integrating PKI with enterprise infrastructure and applications.
• Ability to explain technical decisions to engineering teams and business stakeholders.

HSM integration, cloud PKI, code signing and PQC migration experience would be valuable. Direct PQC experience is not essential where the underlying PKI expertise is strong.

To discuss future opportunities, share your CV and a brief overview of the PKI environments you have designed or delivered.

Darwin Recruitment is acting as an Employment Agency in relation to this vacancy.

Reece Waldon