PKI Engineer

PepsiCo; Metro Manila; On-site; PHP 1,800,000 - 2,400,000; Full time

Job summary

PepsiCo is seeking a senior leader to own the digital certificate services space, overseeing PKI, EKCLM, and HSM solutions globally. You will drive technical discussions with application teams, ensure adherence to security standards, and mentor engineers to meet SLAs.

The role requires deep PKI experience, strong scripting skills, and hands-on work with cloud platforms and certificate lifecycle management tools. You will manage end-to-end delivery and ongoing operations.

Qualifications

• BS/BTech in Engineering or related field.
• 8+ years IT experience.
• 6+ years security experience.
• 7+ years PKI, EKCLM and NHI management.
• 7+ years PowerShell scripting.
• 5+ years cloud platforms (Azure, AWS).
• 5+ years API development/integration.
• Knowledge of AD CS, CRL/OCSP.

Responsibilities

• Lead digital certificate services end-to-end, from design to delivery.
• Mentor engineering and operations teams; ensure SLAs.
• Drive automation for certificate provisioning and monitoring.
• Maintain high availability and DR across regions.
• Provide guidance on certificate lifecycle processes.

Skills

PKI expertise

Security

PowerShell

Cloud platforms

API development

AD CS

Incident mgmt

Strategic thinking

Education

BS/BTech in Engineering

Tools

Venafi

AppViewX

Keyfactor

Thales HSM

Job description

• Lead the digital certificate services space, a digital form of identification where consumers, businesses and organizations can exchange data securely, using public key infrastructure (PKI), Enterprise Key and Certificate Lifecycle management (EKCM), Hardware Security Modules (HSM) solutions for global PepsiCo.
• Drive technical discussions to understand digital certificate services requirements while partnering with application teams who design and implement solutions.
• Ensure digital certificate services provided align with PepsiCo’s security standards and align with industry best practices.
• Manage the engineering and operations teams (people and work) for digital certificate services by mentoring junior members, ensuring SLAs are met, and ensuring tasks are properly completed.
• Manage the certificate services space end-to-end from designing solutions for services for new integrations and patterns, to implementing projects in the certificate services space, and providing sustained support across all products in the certificate services space.
• Drive automation initiatives for certificate services including certificate provisioning and monitoring for digital certificate services by identifying opportunities for enhancements and implementation with no issues.
• Maintain and enhance global solutions for the digital certificate area ensuring high availability and disaster recovery across regions with resiliency including planning and delivering upgrades.
• Provide guidance, educate key stakeholders on certificate life cycle processes and procedures.
• Lead incident management for digital certificate services across the solution stack driving root cause and resolution within service level agreement.

Qualifications:

Technical Requirements

• BS/BTech in Engineering or a related field
• 8+ years of overall IT experience
• 6+ years of Security experience
• 7+ years of PKI, EKCLM, and NHI Management experience
• 7+ years of PowerShell scripting experience
• 5+ years of experience with cloud platforms (Azure, AWS)
• 5+ years of API development and integration experience
• Good working knowledge of cryptographic and modern auth protocols
• Well versed with Certificate based authentication and device trust
• Well versed with Non-Human Identity management
• In depth knowledge of Active Directory Certificate Services (AD CS)
• In depth knowledge of CRL and OCSP and their functionality
• Familiarity with PKI and cryptographic terminology and management
• Knowledge of CLM tool such as Venafi, AppviewX, Keyfactor added advantage
• Hands on experience and Working knowledge of Thales HSM
• Hands on experience and working knowledge of public CA
• Good working knowledge of cloud platforms (Azure and AWS) and SaaS offerings for PKI and EKCLM
• Knowledge of Active Directory domain service
• Knowledge of scripting languages such as PowerShell, API based automation
• Knowledge of ITSM processes like request, incident, change management etc.

Non-technical requirements:

• Strong oral and written communications skills
• Ability to work within project timelines
• Deliver outcomes with a little supervision, must be a self-starter and self-motivator
• Proactive approach and enthusiasm for problem identification and solving
• Ability to think strategically and suggest creative solutions
• Ability to synthesize complex requirements into simple business practices
• Flexible and able to adapt to changing priorities

At the heart of PepsiCo are our people: professionals who bring curiosity, drive, and fresh thinking, working together to turn ideas into action. Across functions, teams, and markets, we collaborate to solve challenges, unlock new opportunities, and create meaningful impact for our consumers, customers, and communities.

No matter your role, you'll be part of a connected community where your contributions matter, your voice is heard, and your development is supported. With opportunities to grow, belong, and smile, PepsiCo offers more than a place to build your career—it offers the chance to help create what's next.