Key&Certificate Management Engineer / Cryptographic Security Engineer (Contract)

• Manage PKI, CA, SSL/TLS and X.509 Certificate Lifecycle, including issuance, renewal, installation, validation, and revocation.
• Manage and protect cryptographic keys and support Digital Signature, OCSP, and CRL services.
• Support Key & Secret Management solutions such as AWS KMS, Azure Key Vault, HashiCorp Vault, Thales HSM, or SafeNet HSM.
• Implement security controls for AWS/Azure, including Cloud Encryption, CMK, and BYOK.
• Develop scripts and automation using Python, PowerShell, or Bash for certificate and key management.
• Collaborate with Infrastructure, Cybersecurity, and DevSecOps teams to maintain secure enterprise environments.

Qualifications / Must Have

• Bachelor's degree in Computer Science, IT, Computer Engineering, Cybersecurity, or related fields.
• Hands-on experience in PKI, Certificate Management, SSL/TLS, X.509, and CA.
• Understanding of Cryptography, including AES, RSA, ECC, Public/Private Key, Digital Signature, Hashing, and Key Lifecycle.
• Experience with at least one KMS / HSM / Secret Management solution.
• Experience with AWS or Azure and cloud encryption.
• Experience with Python, PowerShell, or Bash scripting.

Nice to Have

• HSM Implementation / KMIP
• Multi-Cloud Security
• Kubernetes Secret Management
• DevSecOps / CI-CD
• Quantum-safe Cryptography
• CyberArk / Enterprise Secret Management