PKI Operations Lead – Managed Services

NCC Group; Manila; Hybrid; PHP 600,000 - 900,000; Full time

Benefits offered by this job

Transportation allowance

Rice allowance

Night differential & holiday pay

13th-month pay + bonus plan

Day-1 HMO coverage

Job summary

NCC Group is seeking a PKI Analyst in Taguig City, Metro Manila, with hybrid work arrangement (2 days onsite). The role focuses on the day-to-day operation and governance of a managed PKI service for a financial services client, ensuring service reliability and incident response.

The position emphasizes operational discipline, cryptographic risk awareness, and effective stakeholder communication, rather than PKI architecture. Strong SLAs and client-facing delivery are required.

Qualifications

• Experience in a managed service or security operations role with defined SLAs.
• Strong understanding of PKI concepts including certificates, authorities, trust chains, expiry, and revocation.
• Experience managing certificate lifecycles within enterprise or managed services.
• Experience with systems that require privileged access and governance.

Responsibilities

• Provide operational support for managed PKI services.
• Maintain accurate inventory of certificates (public/private).
• Manage certificate issuance, renewal, revocation, and re-keying per PKI processes.

Skills

Managed service experience

Security operations

IAM

Security platform operations

PKI concepts

Certificate lifecycle management

Privileged access governance

SLA adherence

Client-facing

Education

Degree in security/computer science

Tools

Sectigo

DigiCert

Microsoft AD CS

Venafi

Job description

NCC Group is seeking a PKI Analyst in Taguig City, Metro Manila, with hybrid work arrangement (2 days onsite). The role focuses on the day-to-day operation and governance of a managed PKI service for a financial services client, ensuring service reliability and incident response.

The position emphasizes operational discipline, cryptographic risk awareness, and effective stakeholder communication, rather than PKI architecture. Strong SLAs and client-facing delivery are required.