PKI Engineer

Job Role :- PKI Engineer

Job Location :- Singapore

Experience: 10+ Years

Role Summary

We are seeking an experienced PKI Engineer to design, implement, administer, and support Public Key Infrastructure (PKI) environments. The role will manage digital certificate lifecycles, cryptographic technologies, PKI automation, security compliance, and integration with enterprise systems.

Key Roles & Responsibilities

• Design, implement, and maintain PKI infrastructure, including CA, RA, and certificate management platforms.
• Manage the full certificate lifecycle, including issuance, renewal, revocation, replacement, and expiry monitoring.
• Deploy and support SSL/TLS certificates across servers, applications, databases, APIs, middleware, and network devices.
• Manage cryptographic keys, HSMs, certificate inventory, and compliance reporting.
• Automate certificate provisioning and renewal using scripts, APIs, and workflows.
• Integrate PKI solutions with enterprise applications, monitoring, ITSM, security, and secrets management platforms.
• Troubleshoot certificate, authentication, encryption, and trust-chain issues.
• Maintain PKI standards, procedures, documentation, and audit requirements.
• Support PKI modernization initiatives, including TLS 1.3 and Post-Quantum Cryptography (PQC) readiness.

Skills & Requirements

• Strong knowledge of PKI, X.509 certificates, CA/RA, CRL, OCSP, and SSL/TLS.
• Experience with PKI/CLM platforms such as Microsoft ADCS, DigiCert, Entrust, Keyfactor, Venafi, AppViewX, or similar technologies.
• Knowledge of cryptographic standards including RSA, ECC, AES, SHA-2/SHA-3, and TLS 1.2/1.3.
• Hands-on experience with Windows and Linux environments.
• Scripting skills in PowerShell, Python, or Shell scripting.
• Understanding of HSMs, RBAC, security controls, and audit/compliance requirements.
• Experience integrating PKI solutions with enterprise applications and infrastructure platforms.
• Relevant experience in PKI, cybersecurity, or infrastructure security.

Preferred

• Relevant security certifications such as CISSP, CISM, Security+, or PKI-related certifications.
• Experience with certificate lifecycle management and automation solutions.
• Experience in regulated or large-scale enterprise environments.