Enterprise PKI Specialist (Contractor)

Enterprise PKI Specialist (Fixed Term Contract) 

 
The Enterprise PKI Specialist is a senior technical specialist responsible for the design, implementation, governance, and evolution of Public Key Infrastructure (PKI) services across Qube Research & Technologies (QRT). 
 
The successful candidate will serve as the organisation's primary PKI subject matter expert, providing strategic guidance, architectural leadership, hands-on engineering expertise, and technical governance across all PKI-related initiatives. 
 
This is a highly specialised role requiring extensive experience designing, building, and modernising PKI environments within large enterprises. The successful candidate will have a proven track record of delivering PKI programmes from initial requirements gathering and architecture design through to implementation, operationalisation, and long-term governance. 
 

PKI Architecture & Delivery 

• Design and deliver enterprise grade PKI architecture and supporting operational model. 

• Design and implement root and issuing Certificate Authority (CA) hierarchies. 

• Define certificate policies, certificate profiles, naming standards, trust models, and operational controls. 

• Design resilient, highly available PKI infrastructure and supporting services. 

• Lead the implementation and migration of PKI platforms, tooling, and supporting infrastructure. 

• Define disaster recovery, backup, recovery, and key protection requirements for PKI services. 

• Design and oversee Hardware Security Module (HSM) integration and key management processes. 

• Establish operational procedures for certificate issuance, renewal, revocation, recovery, and lifecycle management. 

• Ensure solutions are scalable, supportable, and aligned with security and regulatory requirements. 

PKI Subject Matter Expertise 

• Act as the organisation's recognised PKI authority and trusted advisor. 

• Provide expert guidance on certificate authority design, trust models, certificate lifecycle management, revocation strategies, and key protection. 

• Advise engineering and platform teams on PKI integration requirements and best practices. 

• Review proposed solutions and ensure alignment with established PKI standards and architectural principles. 

• Provide technical leadership for complex PKI-related initiatives and problem resolution. 

Machine Identity & Certificate Lifecycle Management 

• Develop enterprise approaches for managing machine identities at scale. 

• Design and implement automated certificate issuance, renewal, rotation, and revocation processes. 

• Support certificate management across infrastructure, cloud, container, networking, and application environments. 

• Reduce operational risk associated with certificate expiry and trust failures. 

• Define standards for certificate discovery, inventory, monitoring, and reporting. 

Stakeholder Engagement & Governance 

• Work closely with infrastructure, engineering, cloud, security, risk, and operational teams. 

• Translate complex PKI and cryptographic concepts into clear business and technical recommendations. 

• Develop PKI standards, policies, procedures, and governance documentation. 

• Support audits and regulatory reviews relating to cryptographic and PKI controls.