Job Description: Location: Erskine Due to nature of this role we can only accept applications from UK nationals who are elgible for SC clearance and who can be based onsite in Erskine. At DXC Technology, delivering excellence for our customers and colleagues is more than just a motto, it’s something we strive towards constantly through our work. Every day we deliver mission critical services in a secure environment whilst promoting our people first agenda, a real sense of community and a healthy work-life balance. Our consistently positive customer feedback and continuous growth helps us cement our place as one of the world’s leading IT solutions enterprises, helping us deliver services and solutions in both challenging and exciting situations. We believe that hiring a diverse team is crucial to our success and our recruiting decisions are based on your skills and experience as an individual. We actively encourage consistent growth on our journey towards a culture of inclusion and recognise that the people we employ are vital to providing a great customer experience. As such, we have a variety of training, support, and tools available to aid in your continual personal and professional development. Our ongoing goal is to drive innovation and modernise operations across the board, which includes furthering the skills of our colleagues. At DXC, building a better you, builds a better us. The Senior PKI Engineer is responsible for the build, configuration, deployment, and daily management of enterprise Public Key Infrastructure (PKI) solutions. This includes both Microsoft ADCS environments and third-party PKI tooling such as Thales CipherTrust and Digicert. The role requires hands-on experience with Hardware Security Modules (HSMs), Certificate Authority (CA) management, and secure key lifecycle operations. Key Responsibilities: PKI Architecture & Deployment Implement scalable PKI solutions across hybrid environments. Configure and maintain Microsoft ADCS and third-party PKI tooling such as CipherTrust Manager. Integrate PKI with enterprise identity, authentication, and encryption services. Operational Management Perform daily monitoring, maintenance, and troubleshooting of PKI systems. Manage certificate lifecycle processes including issuance, renewal, revocation, and auditing. Conduct key ceremonies and manage secure key storage and rotation. (will require travel) Security & Compliance Ensure PKI operations comply with internal security policies and external standards (e.g., NIST, ISO 27001). Maintain documentation for audits, incident response, and change management. Collaborate with compliance teams to support regulatory requirements. Tooling & Automation Develop scripts and automation for certificate management and monitoring. Integrate PKI services with cloud-native platforms. Collaboration & Support Work closely with PKI SME’s, infrastructure, application, and security teams to support secure communications and data protection. Provide technical guidance and mentorship to junior engineers. Required Qualifications: Solid hands-on experience in PKI engineering or cryptographic infrastructure. Strong expertise in Microsoft ADCS and PKI tooling like CipherTrust Manager. Experience with HSMs (e.g., Thales Luna, SafeNet) and CA lifecycle management. Solid understanding of X.509 certificates, TLS/SSL, OCSP, CRL, and key management protocols. Proficiency in scripting (PowerShell, Python) and automation tools. Familiarity with cloud KMS solutions (AWS, Azure, GCP) is a plus. What we will do for you: Competitive compensation Pension scheme DXC Select – Our comprehensive benefits package (includes private health/medical insurance, childcare vouchers, gym membership and more) Perks at Work (discounts on technology, groceries, travel and more) DXC incentives (recognition tools, employee lunches, regular social events etc) At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive. Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here .