PKI Engineer

Ricebowl; Sepang; On-site; MYR 78,000 - 134,000; Full time

Job summary

Jora Malaysia is seeking a PKI Engineer to implement, operate, monitor, and support PKI services including CA, RA, HSM, OCSP, CRL, and timestamping. You will manage certificate lifecycles and ensure secure key management, integrate PKI with business applications, and collaborate with cybersecurity and operations teams to maintain high availability.

The role requires a Bachelor’s degree in CS/IT/Cybersecurity or related field and 2–5 years of PKI/cybersecurity experience, with knowledge of X.509,

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering or equivalent.
• 2–5 years of PKI, cybersecurity, systems administration, or related technical roles.
• Knowledge of X.509 certificates, certificate lifecycle management, CA/RA operations, HSM, OCSP, CRL, TLS/SSL, encryption, key management, and authentication technologies.

Responsibilities

• Implement, operate, monitor, and support PKI services including CA, RA, HSM, OCSP, CRL, timestamping, and related trust services.
• Manage certificate lifecycle activities: issuance, renewal, revocation, validation, and secure key management.
• Support integration between PKI services and business applications, systems, or customer-facing platforms.
• Perform troubleshooting, system monitoring, incident support, vulnerability remediation, system hardening, and change implementation.
• Maintain technical documentation, audit evidence, and compliance records.

Skills

Cryptography

Security infrastructure

Operating systems

Networking

Security hardening

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering

Tools

Windows Server

Linux

Scripting

Job description

Jora Malaysia will close on 16th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

Implement, operate, monitor, and support Public Key Infrastructure (PKI) services, including Certificate Authority (CA), Registration Authority (RA), Hardware Security Module (HSM), Online Certificate Status Protocol (OCSP), Certificate Revocation List (CRL), timestamping, and related trust services.

Manage certificate lifecycle activities, including certificate issuance, renewal, revocation, validation, and secure key management.

Support integration between PKI services and business applications, systems, or customer-facing platforms.

Perform troubleshooting, system monitoring, incident support, vulnerability remediation, system hardening, and change implementation.

Maintain technical documentation, operational procedures, audit evidence, and compliance records in line with internal policies and regulatory requirements.

Work closely with cybersecurity, infrastructure, application, and operations teams to ensure PKI services remain secure, reliable, scalable, and highly available.

The PKI Engineer is responsible for managing and supporting the organisation's Public Key Infrastructure and digital trust services. The role covers CA and RA systems, HSM operations, certificate issuance and revocation, OCSP and CRL services, timestamping, and integration with business applications. The candidate will ensure that PKI platforms are secure, highly available, properly documented, and aligned with compliance, audit, and operational requirements. This position also supports monitoring, troubleshooting, system hardening, incident response, change implementation, and continuous improvement activities to strengthen the organisation's trust infrastructure. The candidate should have strong technical knowledge in cryptography, security infrastructure, operating systems, networking, and secure system administration, with the ability to work collaboratively across technical and business teams.

QUALIFICATIONS

Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, Engineering, or equivalent experience.

Minimum 2-5 years of experience in PKI, cybersecurity, systems administration, infrastructure operations, or related technical roles.

Knowledge of X.509 certificates, certificate lifecycle management, CA/RA operations, HSM, OCSP, CRL, TLS/SSL, encryption, key management, and authentication technologies.

Experience with Windows Server, Linux, networking, scripting, monitoring tools, incident handling, change management, documentation, and security hardening.

Relevant certifications such as Security+, CISSP, CEH, Microsoft, Linux, cloud, or PKI-related certification will be an added advantage.