Enterprise PKI Specialist (Contractor)

About this role

Enterprise PKI Specialist (Fixed Term Contract) The Enterprise PKI Specialist is a senior technical specialist responsible for the design, implementation, governance, and evolution of Public Key Infrastructure (PKI) services across Qube Research & Technologies (QRT). The successful candidate will serve as the organisation's primary PKI subject matter expert, providing strategic guidance, architectural leadership, hands-on engineering expertise, and technical governance across all PKI-related initiatives.

This is a highly specialised role requiring extensive experience designing, building, and modernising PKI environments within large enterprises. The successful candidate will have a proven track record of delivering PKI programmes from initial requirements gathering and architecture design through to implementation, operationalisation, and long-term governance. PKI Architecture & Delivery Design and deliver enterprise grade PKI architecture and supporting operational model .

Design and implement root and issuing Certificate Authority (CA) hierarchies. Define certificate policies, certificate profiles, naming standards, trust models, and operational controls. Design resilient, highly available PKI infrastructure and supporting services. Lead the implementation and migration of PKI platforms, tooling, and supporting infrastructure. Define disaster recovery, backup, recovery, and key protection requirements for PKI services.

Design and oversee Hardware Security Module (HSM) integration and key management processes. Establish operational procedures for certificate issuance, renewal, revocation, recovery, and lifecycle management. Ensure solutions are scalable, supportable, and aligned with security and regulatory requirements. PKI Subject Matter Expertise Act as the organisation's recognised PKI authority and trusted advisor. Provide expert guidance on certificate authority design, trust models, certificate lifecycle management, revocation strategies, and key protection.

Advise engineering and platform teams on PKI integration requirements and best practices. Review proposed solutions and ensure alignment with established PKI standards and architectural principles. Provide technical leadership for complex PKI-related initiatives and problem resolution. Machine Identity & Certificate Lifecycle Management <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"",