Senior PKI Engineer

Due to nature of this role we can only accept applications from UK nationals who are elgible for SC clearance and who can be based onsite in Erskine.

At DXC Technology, delivering excellence for our customers and colleagues is more than just a motto, it’s something we strive towards constantly through our work. Every day we deliver mission critical services in a secure environment whilst promoting our people first agenda, a real sense of community and a healthy work-life balance. Our consistently positive customer feedback and continuous growth helps us cement our place as one of the world’s leading IT solutions enterprises, helping us deliver services and solutions in both challenging and exciting situations.

We believe that hiring a diverse team is crucial to our success and our recruiting decisions are based on your skills and experience as an individual. We actively encourage consistent growth on our journey towards a culture of inclusion and recognise that the people we employ are vital to providing a great customer experience. As such, we have a variety of training, support, and tools available to aid in your continual personal and professional development. Our ongoing goal is to drive innovation and modernise operations across the board, which includes furthering the skills of our colleagues. At DXC, building a better you, builds a better us.

The Senior PKI Engineer is responsible for the build, configuration, deployment, and daily management of enterprise Public Key Infrastructure (PKI) solutions. This includes both Microsoft ADCS environments and third-party PKI tooling such as Thales CipherTrust and Digicert. The role requires hands-on experience with Hardware Security Modules (HSMs), Certificate Authority (CA) management, and secure key lifecycle operations.

Key Responsibilities:

• PKI Architecture & Deployment

• Implement scalable PKI solutions across hybrid environments.

• Configure and maintain Microsoft ADCS and third-party PKI tooling such as CipherTrust Manager.

• Integrate PKI with enterprise identity, authentication, and encryption services.

• Operational Management

• Perform daily monitoring, maintenance, and troubleshooting of PKI systems.

• Manage certificate lifecycle processes including issuance, renewal, revocation, and auditing.

• Conduct key ceremonies and manage secure key storage and rotation. (will require travel)

• Security & Compliance

• Ensure PKI operations comply with internal security policies and external standards (e.g., NIST, ISO 27001).

• Maintain documentation for audits, incident response, and change management.

• Collaborate with compliance teams to support regulatory requirements.

• Tooling & Automation

• Develop scripts and automation for certificate management and monitoring.

• Integrate PKI services with cloud-native platforms.

• Collaboration & Support

• Work closely with PKI SME’s, infrastructure, application, and security teams to support secure communications and data protection.

• Provide technical guidance and mentorship to junior engineers.

Required Qualifications:

• Solid hands-on experience in PKI engineering or cryptographic infrastructure.

• Strong expertise in Microsoft ADCS and PKI tooling like CipherTrust Manager.

• Experience with HSMs (e.g., Thales Luna, SafeNet) and CA lifecycle management.

• Solid understanding of X.509 certificates, TLS/SSL, OCSP, CRL, and key management protocols.

• Proficiency in scripting (PowerShell, Python) and automation tools.

• Familiarity with cloud KMS solutions (AWS, Azure, GCP) is a plus.

What we will do for you:

• Competitive compensation

• Pension scheme

• DXC Select – Our comprehensive benefits package (includes private health/medical insurance, childcare vouchers, gym membership and more)

• Perks at Work (discounts on technology, groceries, travel and more)

• DXC incentives (recognition tools, employee lunches, regular social events etc)