Cloud PKI & Crypto Security Engineer

Exasoft Pte. Ltd.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Exasoft Pte. Ltd. in Singapore seeks an experienced security professional to lead cryptography, PKI, CLM and EKMS initiatives.

You will coordinate delivery with security architects, PKI operators, application teams, and vendors, and assess requirements across on-prem and AWS environments. You will design, implement, and operate CLM/EKMS platforms, manage certificate lifecycles, and monitor incidents related to PKI, HSMs, and cryptographic keys while aligning with FIPS/NIST standards and

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum 5 years IT or cybersecurity experience, including at least 2 years hands-on PKI, CLM, or Enterprise Key Management.
• Strong understanding of cryptography, PKI, X.509 certificates, TLS/mTLS, PKCS standards, CA, and key management.
• Hands-on experience with CLM platforms such as CyberArk Venafi, Keyfactor, Entrust, or similar technologies.
• Experience with Enterprise Key Management Systems and HSMs such as Entrust nShield, Thales CipherTrust, AWS KMS, or AWS CloudHSM.

Responsibilities

• Coordinate the delivery and implementation of Cryptography, PKI, Certificate Lifecycle Management (CLM), and Enterprise Key Management System (EKMS) solutions.
• Work closely with Security Architects, PKI/CA operators, application teams, platform owners, implementation partners, and vendors.
• Conduct requirement workshops and assess certificate and key management requirements across on-premises and AWS cloud environments.
• Support the design, implementation, and operationalization of CLM and EKMS platforms.
• Manage certificate lifecycle activities including discovery, issuance, enrollment, renewal, revocation, rotation, and expiry monitoring.
• Support enterprise key management processes and Hardware Security Module (HSM) operations.
• Apply cryptographic standards and best practices including FIPS, NIST, X.509, TLS/mTLS, and PKCS.
• Monitor, troubleshoot, and resolve incidents related to certificates, cryptographic keys, PKI infrastructure, and HSMs.
• Automate certificate and key management processes using Python, PowerShell, Bash, and REST APIs.
• Integrate cryptographic platforms with enterprise tools such as ITSM, IAM/SSO, SIEM, and monitoring platforms.
• Coordinate with technology vendors and implementation partners for support, delivery, and knowledge transfer.
• Support cryptographic asset discovery, CBOM development, and PQC transition initiatives.

Skills

PKI experience

Cryptography knowledge

TLS/mTLS

REST APIs

Python automation

Scripting Bash/PowerShell

AWS cloud security

HSMs

CLM tools

Agile/SDLC

Education

Bachelor's degree

Tools

CyberArk Venafi

Keyfactor

Entrust

AWS KMS

AWS CloudHSM

ServiceNow

PingOne

Splunk

Datadog

Nessus

Job description

Exasoft Pte. Ltd. in Singapore seeks an experienced security professional to lead cryptography, PKI, CLM and EKMS initiatives.

You will coordinate delivery with security architects, PKI operators, application teams, and vendors, and assess requirements across on-prem and AWS environments. You will design, implement, and operate CLM/EKMS platforms, manage certificate lifecycles, and monitor incidents related to PKI, HSMs, and cryptographic keys while aligning with FIPS/NIST standards and