Tier 2 Support Engineer (Public Key Infrastructure)

Penbrothers Live; Mandaluyong; On-site; PHP 558,000 - 781,200; Full time

Benefits offered by this job

Career growth opportunities

Contribution to meaningful work

Comfortable work from home environment

Job summary

A leading talent management company in the Philippines is seeking a PKI Engineer to manage certificate and key operations in a hybrid role. Candidates should have 1-3 years of experience in PKI, cybersecurity, or cryptography, and a relevant degree. Responsibilities include designing PKI solutions, managing lifecycle operations, and troubleshooting issues. The position is on-site three days a week in Mandaluyong, offering competitive growth opportunities and meaningful work in a global context.

Qualifications

• 1-3 years of experience in PKI, cybersecurity, or related roles.
• Strong understanding of cryptographic fundamentals and certificate chains.
• Hands-on experience with Public Key Infrastructure concepts.

Responsibilities

• Design, implement, and support PKI solutions.
• Manage certificate lifecycle including issuance, renewal, and revocation.
• Troubleshoot certificate-related issues such as missing or expired certificates.

Skills

PKI key generation & algorithms

Public and Private Keys understanding

Microsoft Azure Experience

Docker and Kubernetes familiarity

Networking fundamentals

Education

Bachelor’s degree in Computer Science, IT or Cybersecurity

Tools

OpenSSL

Keystore Explorer

EJBCA

Job description

Penbrothers is an HR & remote talent management partner and one of the fastest-growing companies in the Philippines. We provide talented Filipinos with global opportunities in high-growth startups and dynamic companies, from the comfort of their own homes.

About the Client: Our client is a global leader in digital trust, PKI, and machine identity management, helping organizations manage and secure keys, certificates, and identities across cloud, containers, and enterprise environments. As digital ecosystems grow, we enable secure, scalable, and automated cryptographic operations.

About the Role: We are building a talent pool for PKI Engineers to support enterprise scale certificate and key management initiatives. This role focuses on Public Key Infrastructure (PKI), certificate lifecycle management, cryptographic systems, and secure integrations across cloud, containerized, and on-prem environments.

What You’ll Do

• PKI key generation & algorithms
• Understands public & private keys, generation and algorithms

Secondary Requirement / Nice to Have

• Design, implement, and support Public Key Infrastructure (PKI) solutions
• Manage the certificate lifecycle (issuance, renewal, expiration, revocation, error handling)
• Troubleshoot certificate-related issues including missing, expired, or misconfigured certificates
• Work with CRLs and OCSP for certificate revocation and distribution
• Perform log analysis to diagnose cryptographic, TLS, and certificate-related issues
• Support TLS protocols, ciphers, token formats, and key generation algorithms
• Integrate PKI services using protocols such as ACME, CMP, EST, SCEP, and REST APIs
• Deploy and support PKI in Azure cloud environments
• Support containerized workloads using Docker and Kubernetes (K8s)
• Troubleshoot issues involving proxies, load balancers, and network layers
• Work across Linux and Windows Server environments
• Collaborate with security, platform, and infrastructure teams to ensure secure system design
• Knowledge of cryptographic concepts (ciphers, token types, TLS protocols, algorithms, key generation)
• OpenSSL
• Keystore Explorer
• EJBCA (ejbca.sh)
• ClientToolbox or similar tools
• Experience with Azure Cloud
• Familiarity with Docker and Kubernetes
• Solid background in Networking fundamentals
• Experience working with SQL databases and SQL scripting
• Proficiency in Linux OS and Windows Server environments
• Understanding of OAuth and modern authentication flows
• Experience supporting enterprise-scale security or infrastructure systems

What You Bring

• Bachelor’s degree in Computer Science, IT, Cybersecurity, or equivalent experience
• 1-3 years of experience in PKI, cybersecurity, infrastructure, or cryptography-related roles
• Amenable to working onsite 3 times per week at Sheridan Business Center, Mandaluyong City
• Strong understanding of Public and Private Keys and cryptographic fundamentals
• Hands‑on experience with PKI concepts and certificate chains

Hiring Process

We utilize AI tools to enhance hiring efficiency and ensure a fair evaluation. Consequently, candidates will engage with an AI Interviewer, supervised by Human Talent Acquisition Experts who will support your entire application journey.

What You’ll Get

• Meaningful work & growth: We take every opportunity to stretch ourselves and deliver an excellent client experience.
• Employees as our biggest asset: We are genuinely invested in our people’s career and welfare.
• Global reach & local impact: Get to work with high-growth startups and dynamic companies from the comfort of your own home.
• Powering global startups: We’ve created 1,400 Filipino jobs that empower global start‑ups to focus on growth.