Overview
Location: Erskine
Due to nature of this role we can only accept applications from UK nationals who are eligible for SC clearance
The Senior PKI Engineer is responsible for the build, configuration, deployment, and daily management of enterprise Public Key Infrastructure (PKI) solutions. This includes both Microsoft ADCS environments and third-party PKI tooling such as Thales CipherTrust and Digicert. The role requires hands-on experience with Hardware Security Modules (HSMs), Certificate Authority (CA) management, and secure key lifecycle operations.
Responsibilities
* PKI Architecture & Deployment
o Implement scalable PKI solutions across hybrid environments.
o Configure and maintain Microsoft ADCS and third-party PKI tooling such as CipherTrust Manager.
o Integrate PKI with enterprise identity, authentication, and encryption services.
* Operational Management
o Perform daily monitoring, maintenance, and troubleshooting of PKI systems.
o Manage certificate lifecycle processes including issuance, renewal, revocation, and auditing.
o Conduct key ceremonies and manage secure key storage and rotation. (will require travel)
* Security & Compliance
o Ensure PKI operations comply with internal security policies and external standards (e.g., NIST, ISO 27001).
o Maintain documentation for audits, incident response, and change management.
o Collaborate with compliance teams to support regulatory requirements.
* Tooling & Automation
o Develop scripts and automation for certificate management and monitoring.
o Integrate PKI services with cloud-native platforms.
* Collaboration & Support
o Work closely with PKI SMEs, infrastructure, application, and security teams to support secure communications and data protection.
o Provide technical guidance and mentorship to junior engineers.
Required Qualifications
* Minimum 5 years of hands-on experience in PKI engineering or cryptographic infrastructure.
* Strong expertise in Microsoft ADCS and PKI tooling like CipherTrust Manager.
* Experience with HSMs (e.g., Thales Luna, SafeNet) and CA lifecycle management.
* Solid understanding of X.509 certificates, TLS/SSL, OCSP, CRL, and key management protocols.
* Proficiency in scripting (PowerShell, Python) and automation tools.
* Familiarity with cloud KMS solutions (AWS, Azure, GCP) is a plus.
What we will do for you
* Competitive compensation
* Pension scheme
* DXC Select – Our comprehensive benefits package (includes private health/medical insurance, childcare vouchers, gym membership and more)
* Perks at Work (discounts on technology, groceries, travel and more)
* DXC incentives (recognition tools, employee lunches, regular social events etc)
At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.
Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf.More information on employment scams is available here.
#J-18808-Ljbffr