Data Security Lifecycle Management (PKI Engineer)

Xurpas, Inc.; Mandaluyong; On-site; PHP 900,000 - 1,800,000; Full time

Job summary

Xurpas, Inc. in the Philippines seeks an experienced Data Security Lifecycle Management Engineer specializing in PKI to design, implement, and maintain enterprise PKI environments and secure certificate lifecycle operations across systems.

The role emphasizes hands-on PKI administration, CA management, CRLs, and automation, collaborating with security and infrastructure teams to ensure high availability and secure certificate services.

Qualifications

• Minimum 5 years of experience in Certificate Lifecycle Management ( SME Level ).
• Strong hands-on experience with PKI, Certificate Authorities, Certificate Revocation Lists (CRLs) and SCEP.
• Experience building and managing Certificate Authorities that generate digital certificates.
• Proficiency in certutil and other PKI administration tools.
• Experience with certificate management platforms and PKI operational processes.
• Experience troubleshooting PKI-related issues and ensuring high availability of certificate services.

Responsibilities

• Install, configure, administer, and maintain PKI environments.
• Build, manage, and maintain Certificate Authorities that generate and issue digital certificates.
• Configure and support CRLs, SCEP, and other PKI-related services.
• Manage the complete certificate lifecycle: issuance, renewal, revocation, expiration notifications.
• Automate and script certificate tasks; use PKI administration tools.
• Troubleshoot PKI issues and ensure high availability of certificate services.
• Collaborate with infrastructure and security teams to maintain enterprise PKI operations.

Skills

PKI

Certificate Lifecycle Management

Public Key Infrastructure

Certificate Authorities

CRLs

SCEP

certutil

Automation

Troubleshooting PKI

PKI operational processes

Certificate management platforms

Tools

certutil

Job description

We are seeking an experienced Data Security Lifecycle Management Engineer with strong expertise in Public Key Infrastructure (PKI) and Certificate Lifecycle Management. The ideal candidate will be responsible for designing, implementing, administering, and maintaining PKI environments while ensuring secure certificate lifecycle operations across enterprise systems.

Responsibilities

• Install, configure, administer, and maintain Public Key Infrastructure (PKI) environments.
• Build, manage, and maintain Certificate Authorities (CAs) that generate and issue digital certificates.
• Configure and support Certificate Revocation Lists (CRLs), SCEP, and other PKI-related services.
• Manage the complete certificate lifecycle, including:
• Certificate issuance
• Renewal
• Revocation
• Expiration notifications
• Automation and scripting
• Utilize certutil and other PKI administration tools for certificate management.
• Troubleshoot PKI-related issues and ensure high availability of certificate services.
• Support certificate management platforms and ensure compliance with security best practices.
• Collaborate with infrastructure and security teams to maintain enterprise PKI operations.

Required Skills

• Minimum 5 years of experience in Certificate Lifecycle Management (SME Level).
• Strong hands‑on experience with:
• Public Key Infrastructure (PKI)
• Certificate Authorities (CA)
• Certificate Revocation Lists (CRLs)
• SCEP
• Digital certificate management
• Experience building and managing Certificate Authorities that generate digital certificates.
• Proficiency in certutil and other PKI management tools.
• Strong experience managing the complete certificate lifecycle.
• Experience with certificate management platforms and PKI operational processes.

Preferred Skills

• Basic to intermediate knowledge of:
• Windows Active Directory; Windows Server Administration; Windows infrastructure
• Familiarity with Windows administration and troubleshooting.

Required Skill

• Certificate Lifecycle Management (2HC)