PKI Sr. Analyst- SME

Pepsi-Cola Products Philippines Inc.; Makati; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Pepsi-Cola Products Philippines Inc. seeks an experienced PKI engineer to manage end-to-end certificate services, lifecycle management, and security operations across global PepsiCo environments.

You will lead engineering and operations for PKI, EKCM, and HSM solutions, drive automation, and ensure high availability and disaster recovery. You will mentor teams, define standards, and collaborate with application groups to implement secure certificate services while maintaining compliance with

Qualifications

• BS/BTech in Engineering or related field required.
• At least 8+ years IT experience with security focus.
• 7+ years PKI, EKCLM, and NHI management experience.
• 7+ years of PowerShell scripting experience.
• 5+ years of cloud platforms (Azure, AWS).
• 5+ years API development and integration experience.
• Knowledge of PKI terminology and management.
• Familiarity with Venafi, AppViewX, Keyfactor is a plus.

Responsibilities

• Lead the digital certificate services space across PKI, EKCM, and HSMs for global PepsiCo.
• Drive discussions to gather certificate service requirements with application teams.
• Ensure services align with PepsiCo security standards and best practices.
• Manage engineering and operations teams, mentor staff, meet SLAs, and oversee tasks.
• Oversee end‑to‑end design, implementation, and sustained support of certificate services.
• Drive automation for provisioning and monitoring of certificates.
• Maintain global solutions with high availability and DR across regions.
• Provide guidance and educate stakeholders on certificate life cycle processes.
• Lead incident management for certificate services and ensure timely RCAs.

Skills

PKI

EKCM

HSM

PowerShell

Cloud platforms

API development

Security standards

Active Directory

Public CA

ITSM

Education

BS/BTech in Engineering

Tools

Venafi

AppViewX

Keyfactor

Thales HSM

AD CS

Job description

Overview

This role will be responsible for managing end-to-end digital certificate and lifecycle management solutions across all supporting components. The role includes Engineering, Integrations, Operations, and maintenance of the global PKI and NHI environment, ensuring alignment with industry standards and best practices.

Responsibilities

At PepsiCo, you'll find the opportunity to grow your career, make an impact, and help shape what's next. As one of the world's leading food and beverage companies, our beloved brands—including Gatorade, Lay's, and Quaker—help create smiles with every sip and bite. Behind our products is a connected system that starts with how we source and grow ingredients alongside farmers and extends to how we make, move, and deliver products while driving positive impact for our business and communities.

Responsibilities:

• Lead the digital certificate services space, a digital form of identification where consumers, businesses and organizations can exchange data securely, using public key infrastructure (PKI), Enterprise Key and Certificate Lifecycle management (EKCM), Hardware Security Modules (HSM) solutions for global PepsiCo.


• Drive technical discussions to understand digital certificate services requirements while partnering with application teams who design and implement solutions.


• Ensure digital certificate services provided align with PepsiCo’s security standards and align with industry best practices.


• Manage the engineering and operations teams (people and work) for digital certificate services by mentoring junior members, ensuring SLAs are met, and ensuring tasks are properly completed.


• Manage the certificate services space end-to-end from designing solutions for services for new integrations and patterns, to implementing projects in the certificate services space, and providing sustained support across all products in the certificate services space.


• Drive automation initiatives for certificate services including certificate provisioning and monitoring for digital certificate services by identifying opportunities for enhancements and implementation with no issues.


• Maintain and enhance global solutions for the digital certificate area ensuring high availability and disaster recovery across regions with resiliency including planning and delivering upgrades.


• Provide guidance, educate key stakeholders on certificate life cycle processes and procedures.


• Lead incident management for digital certificate services across the solution stack driving root cause and resolution within service level agreement.

Qualifications

Technical Requirements:

• BS/BTech in Engineering or a related field


• 8+ years of overall IT experience


• 6+ years of Security experience


• 7+ years of PKI, EKCLM, and NHI Management experience


• 7+ years of PowerShell scripting experience


• 5+ years of experience with cloud platforms (Azure, AWS)


• 5+ years of API development and integration experience


• Good working knowledge of cryptographic and modern auth protocols


• Well versed with Certificate based authentication and device trust


• Well versed with Non-Human Identity management


• In depth knowledge of Active Directory Certificate Services (AD CS)


• In depth knowledge of CRL and OCSP and their functionality


• Familiarity with PKI and cryptographic terminology and management


• Knowledge of CLM tool such as Venafi, AppviewX, Keyfactor added advantage


• Hands on experience and Working knowledge of Thales HSM


• Hands on experience and working knowledge of public CA


• Good working knowledge of cloud platforms (Azure and AWS) and SaaS offerings for PKI and EKCLM


• Knowledge of Active Directory domain service


• Knowledge of scripting languages such as PowerShell, API based automation


• Knowledge of ITSM processes like request, incident, change management etc.

Non-technical requirements:

• Strong oral and written communications skills


• Ability to work within project timelines


• Deliver outcomes with a little supervision, must be a self-starter and self-motivator


• Proactive approach and enthusiasm for problem identification and solving


• Ability to think strategically and suggest creative solutions


• Ability to synthesize complex requirements into simple business practices


• Flexible and able to adapt to changing priorities

At the heart of PepsiCo are our people: professionals who bring curiosity, drive, and fresh thinking, working together to turn ideas into action. Across functions, teams, and markets, we collaborate to solve challenges, unlock new opportunities, and create meaningful impact for our consumers, customers, and communities.

No matter your role, you'll be part of a connected community where your contributions matter, your voice is heard, and your development is supported. With opportunities to grow, belong, and smile, PepsiCo offers more than a place to build your career—it offers the chance to help create what's next.