PKI HSM Consultant - On Site in London - Inside IR35 - 6 months Role Overview We are looking for a PKI and HSM SME to join on a 6-month fully office-based contract in London (5 days on-site). The role supports a large-scale security transformation programme in the travel and tourism sector, focusing on hands-on implementation, configuration, and troubleshooting of enterprise PKI and HSM services - including Microsoft ADCS, Microsoft Cloud PKI, hardware HSM platforms, and Azure-based HSM services. Key Responsibilities Build and configure PKI services based on defined architecture, managing the full certificate life cycle including issuance, renewal, revocation, and replacement, and configuring certificate distribution and validation services (CRL, OCSP) Perform HSM setup and administration including provisioning, partitioning, backup, and high availability, executing key management activities including key generation, storage, rotation, and secure handling Support and participate in key ceremonies following defined procedures, applying security controls including access control, role separation, and dual control across PKI and HSM environments Support migration from Legacy PKI environments to target solutions, integrating PKI services with Active Directory, Intune, and enterprise applications, and troubleshooting issues across certificates, trust chains, enrolment, and HSM operations Maintain audit logs, monitoring, and operational records, produce technical documentation, ..... full job details .....