PKI Analyst

NCC Group; Taguig; On-site; PHP 480,000 - 720,000; Full time

Benefits offered by this job

Transportation and rice allowances

Night differential

13th-month pay

Day-1 HMO

Outpatient medicine reimbursement

Group life insurance

Employee Assistance Program

Generous vacation and sick leave

Special Time Off

Company share plan

Job summary

NCC Group in Manila is seeking a PKI Analyst to join our Managed Services team. You will handle day-to-day PKI operations using the Sectigo platform, maintain inventories, and support certificate lifecycle activities to keep client services secure and compliant.

The role emphasizes operational discipline, incident response, and close collaboration with service delivery teams and client stakeholders. Two days per week onsite in Taguig.

Qualifications

• Experience in a managed service or security operations role.
• Understanding of PKI concepts, certificates, and trust chains.
• Experience with certificate lifecycle management in enterprise.
• Experience with privileged access governance.
• Strong process discipline with defined SLAs.
• Client-facing or service delivery experience.

Responsibilities

• Provide operational support for managed PKI services.
• Maintain up-to-date inventory of certificates and ownership.
• Manage certificate issuance, renewal, revocation and re-keying.
• Monitor expiry and service availability to prevent outages.
• Support access governance for cryptographic key management.
• Coordinate changes and communicate with stakeholders.

Skills

Managed service experience

Security operations

IAM

PKI concepts

Certificate lifecycle

Privileged access

SLA adherence

Client facing

ITIL familiarity

Security certifications

Education

Relevant degree

Tools

Sectigo PKI

Job description

PKI Analyst

Department: Cyber Services and Capabilities

Employment Type: Full Time

Location: PHL Manila

Description

Position Title: PKI Analyst

Location: Taguig City, Metro Manila – 2 days per week onsite

Role Purpose: This role is an operational position within NCC Group’s Managed Services organisation, responsible for the day‑to‑day operation and support of a managed Public Key Infrastructure (PKI) service for a regulated financial services client.

This role focuses on the effective running, maintenance, and governance of PKI services delivered using the Sectigo platform. This includes managing certificate lifecycles at scale, maintaining accurate PKI inventories, supporting access governance for cryptographic key management systems, and responding to PKI related incidents and service requests.

The role operates within defined managed service processes and escalation paths and works closely with service delivery teams, suppliers, and client stakeholders. The emphasis is on service reliability, risk awareness, and clear communication rather than PKI architecture or engineering design.

The role requires strong operational discipline, an understanding of cryptographic risk, and the ability to support both planned and unplanned maintenance activities while ensuring service levels and client expectations are met.

Key Responsibilities

• Provide operational support for managed PKI services.
• Maintain an accurate and up to date inventory of public and private certificates, including ownership, purpose, issuing authority, and lifecycle state.
• Manage certificate issuance, renewal, revocation, and re keying activities in line with agreed PKI processes and security standards.
• Support the migration and re issuance of existing certificates into the client’s defined PKI structure.
• Monitor certificate expiry and service availability to proactively prevent certificate related outages.
• Maintain and review user access to cryptographic key management systems, ensuring privileged access is restricted, reviewed, and removed appropriately.
• Support joiner, mover, and leaver access management processes for PKI platforms.
• Act as an operational point of contact for PKI related incidents, service requests, and escalations.
• Support planned maintenance activities through change coordination and stakeholder communication.
• Support unplanned maintenance and incident response activities, providing timely and accurate updates to internal teams and client stakeholders.
• Work with internal teams and third party suppliers to ensure PKI platform availability meets agreed service levels.
• Identify and elevate weaknesses or risks within cryptographic services in line with managed services governance and escalation procedures.
• Contribute to the continuous improvement of PKI processes, documentation, and operational runbooks.
• Deliver a professional, customer focused service aligned to managed services delivery standards.

Skills, Knowledge & Expertise

What we are looking for in you:

Minimum Requirements

• Experience working in a managed service, security operations, IAM, or security platform operations role.
• Practical understanding of PKI concepts, including certificates, certificate authorities, trust chains, expiry, and revocation.
• Experience supporting certificate lifecycle management within an enterprise or managed service environment.
• Experience working with systems requiring privileged access and strong access governance.
• Strong process discipline and experience working to defined procedures and SLAs.
• Experience working in a client facing or service delivery role.

Desirable Requirements

• Experience with enterprise PKI platforms such as Sectigo, DigiCert, Microsoft AD CS, Venafi, or similar.
• Experience supporting regulated or financial services clients.
• Familiarity with cryptographic key management systems or HSM concepts.
• ITIL or service management experience.
• Security related certifications such as Security+, GIAC, CISSP, or equivalent.
• Degree in a relevant technical or security related discipline.

Job Benefits

• Transportation and rice allowances
• Night differential, overtime pay and holiday pay
• 13th‑month pay and performance‑based bonus plan
• Day‑1 HMO healthcare coverage for you and dependents
• Outpatient medicine reimbursement
• Group life insurance, accidental death & disability cover
• Employee Assistance Program (EAP) with 24/7 confidential counselling
• Generous vacation and sick leave, available from Day 1
• Special Time Off: Take time off for those big moments in life, like getting married/civil ceremony, becoming a grandparent, and welcoming home a new pet.
• Company share plan & Sharesave scheme allowing discounted share purchase through monthly savings