Senior PKI\\Cryptography Architect

HCM Nexus Consulting Inc; Philippines; On-site; PHP 1,200,000 - 2,400,000; Full time

Job summary

HCM Nexus Consulting Inc is seeking a Senior PKI & Cryptography Architect to lead the design, deployment, and ongoing management of the firm's PKI and cryptography program. You will oversee enterprise PKI services, certificate lifecycle, and cloud/on-premises integration, collaborating with security, infrastructure, and application teams to ensure secure, scalable solutions.

The role requires 5–10 years (preferably 10+) of PKI experience, expertise in cryptography, and familiarity with

Qualifications

• 5–10 years managing PKI infrastructure in enterprise environments.
• Deep cryptography expertise and certificate lifecycle management.
• Experience with cloud-based CAs, especially Azure Key Vault.
• Background in security or server engineering advancing to PKI/cryptography.
• Experience designing and maintaining PKI at scale in enterprise settings.
• Knowledge of TLS/SSL, HSMs, key rotation, secure storage, and compliance (NIST, ISO 27001, GDPR).

Responsibilities

• Lead architecture, deployment, and administration of enterprise PKI systems including CAs and key management.
• Develop and enforce policies and governance for certificates, encryption, and keys.
• Integrate PKI into cloud and on-prem environments with automation and scalability.
• Collaborate with cybersecurity, infrastructure, and applications teams for secure design.
• Evaluate cryptographic technologies and industry trends for continuous improvement.
• Provide technical leadership and mentorship across engineering and security teams.

Skills

PKI infrastructure

Cryptography

Certificate lifecycle management

Azure Key Vault

Security engineering

Server engineering

Cloud integration

Leadership

Mentorship

Tools

HSMs

TLS/SSL tooling

Job description

About the job Senior PKI\\Cryptography Architect

Job Title: PKI & Cryptography Lead

We are seeking a seasoned and highly skilled professional to lead the design, development, and ongoing management of the firms Public Key Infrastructure (PKI) and Cryptography program. This role will be responsible for overseeing the implementation, operation, and evolution of enterprise-level PKI services, ensuring robust, secure, and scalable cryptographic solutions across the organization.

Key Responsibilities:

Lead the architecture, deployment, and administration of enterprise PKI systems, including Certificate Authorities (CAs), registration authorities, and key management systems.

Develop and enforce policies, standards, and governance for digital certificates, encryption, and key handling.

Integrate PKI solutions into cloud and on-premises environments, with a focus on automation, scalability, and resilience.

Work closely with cybersecurity, infrastructure, and application teams to support secure system design and implementation.

Evaluate cryptographic technologies, emerging threats, and industry trends to guide continuous improvement.

Provide technical leadership, mentorship, and guidance across engineering and security teams.

Required Qualifications:

5 to 10 years of experience (preferably 10+ years) managing PKI infrastructure in an enterprise environment.

Deep expertise in cryptography, certificate lifecycle management, and cloud-based certificate authorities (especially Azure Key Vault).

Strong background in security engineering or server engineering, having evolved into a PKI and cryptography specialist.

Proven experience designing, deploying, and maintaining PKI and cryptographic systems at scale in enterprise settings.

Solid understanding of encryption standards, TLS/SSL, HSMs, key rotation, secure storage, and compliance frameworks (e.g., NIST, ISO 27001, GDPR).

Preferred Qualifications:

Professional certification such as CISSP (Certified Information Systems Security Professional) is a plus.