PKI Engineer: Secure Certificates & Trust

Private Advertiser; Cyberjaya; On-site; MYR 90,000 - 130,000; Full time

Job summary

Private Advertiser is seeking a PKI Engineer to implement and operate our Public Key Infrastructure, including CA/RA, HSM operations, OCSP, CRL, and timestamping. You’ll manage the certificate lifecycle and ensure secure key management across business systems.

You will collaborate with cybersecurity, infrastructure, and applications teams to maintain high availability and compliance, while improving security hardening and incident response capabilities.

Qualifications

• Bachelor’s Degree in Computer Science, Information Technology, Cybersecurity, Engineering, or equivalent experience.
• Two to five years of PKI, cybersecurity, systems administration, or related roles.
• Knowledge of X.509 certificates, CA/RA operations, HSM, OCSP, CRL, TLS/SSL, key management and authentication.

Responsibilities

• Implement, operate, monitor, and support PKI services including CA, RA, HSM, OCSP, CRL, timestamping, and related trust services.
• Manage certificate lifecycle activities: issuance, renewal, revocation, validation, and secure key management.
• Support integration between PKI services and business applications, systems, or customer-facing platforms.
• Troubleshoot, monitor, incident support, vulnerability remediation, hardening, and change implementation.
• Maintain documentation, audit evidence, and compliance records per policies and regulatory requirements.
• Collaborate with cybersecurity, infrastructure, application, and operations teams to keep PKI services secure and highly available.

Skills

Cryptography knowledge

Security infrastructure

Operating systems

Networking

Secure system administration

Education

Bachelor’s Degree in Computer Science/IT/Cybersecurity/Engineering or equivalent

Tools

Windows Server

Linux

Scripting

Monitoring tools

Job description

Private Advertiser is seeking a PKI Engineer to implement and operate our Public Key Infrastructure, including CA/RA, HSM operations, OCSP, CRL, and timestamping. You’ll manage the certificate lifecycle and ensure secure key management across business systems.

You will collaborate with cybersecurity, infrastructure, and applications teams to maintain high availability and compliance, while improving security hardening and incident response capabilities.