Certificate & Crypto Lifecycle Engineer

HCL Technologies Limited; Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

HCL Technologies Limited is seeking a Cryptography Engineer to coordinate delivery between IT security architects, implementation partners, and consuming teams. The role focuses on PQC transition support and CLM/EKMS solution design across on-prem and AWS environments.

Responsibilities include working with CyberArk/Venafi/Entrust tools, managing certificate lifecycles, and ensuring security and operational readiness through best practices.

Qualifications

• Degree in CS/IT or related field.
• 5+ years experience, at least 2 years in PKI or enterprise key management.
• Strong knowledge of cryptography, PKI, X.509, TLS/mTLS, PKCS.
• Hands-on experience with CLM platforms (CyberArk/Venafi, Keyfactor, Entrust).
• Hands-on experience with enterprise KMS/HSMs (Entrust nShield, Thales CipherTrust, AWS KMS/CloudHSM).
• Experience integrating security platforms with REST APIs (ITSM, IAM, SIEM).
• Scripting in Python/PowerShell/Bash for automation.
• SDLC/Agile experience; strong communication and teamwork.

Responsibilities

• Coordinate delivery between IT security architects, partners, and consuming teams.
• Workshop requirements and analyze certificate and key management needs across on-prem and AWS.
• Review design of CLM/EKMS solutions for security and operational needs.
• Streamline certificate/key management processes (issuance, renewal, revocation, rotation).
• Incorporate cryptographic best practices (FIPS, NIST, X.509, PKCS) into workflows.
• Monitor and resolve incidents related to certificates, keys, and HSMs; advise teams.
• Manage vendor relationships (CyberArk, Venafi, Entrust) and transfer knowledge.
• Coordinate projects with internal resources and vendors for CLM/EKMS.
• Support cryptographic asset discovery and PQC transition; prepare to role as cryptography engineer.

Skills

PKI

Certificate lifecycle management

Key management

Cryptography

Scripting

AWS

REST APIs integration

SDLC/Agile

Communication

Vendor management

Education

Bachelor's degree in Computer Science/Information Technology or related field

Tools

CyberArk Venafi

Keyfactor

Entrust

AWS KMS

CloudHSM

Thales CipherTrust

Job description

HCL Technologies Limited is seeking a Cryptography Engineer to coordinate delivery between IT security architects, implementation partners, and consuming teams. The role focuses on PQC transition support and CLM/EKMS solution design across on-prem and AWS environments.

Responsibilities include working with CyberArk/Venafi/Entrust tools, managing certificate lifecycles, and ensuring security and operational readiness through best practices.