Contract PKI Engineer — Certificate Lifecycle & Security

PERSOL SINGAPORE PTE. LTD.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

Reputed Bank is seeking a seasoned PKI Administrator to oversee PKI infrastructure, certificate lifecycle, and security controls. The role involves managing CAs, issuing and revoking certificates, and ensuring expiry monitoring across diverse systems.

The successful candidate will deploy SSL/TLS across applications, servers, and databases, manage cryptographic keys and HSMs, and build automation for provisioning and renewal while troubleshooting encryption issues and PKI integrations.

Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Information Technology, Cybersecurity or related discipline.
• Minimum 5 years in PKI administration and certificate lifecycle management.
• Knowledge of PKI, X.509 Certificates, CA, TLS/SSL, CRL, and OCSP.

Responsibilities

• Manage PKI infrastructure, Certificate Authorities (CA), and certificate management platforms.
• Administer certificate issuance, renewal, revocation, and expiry monitoring.
• Deploy and support SSL/TLS certificates across applications, servers, databases, and network devices.
• Manage cryptographic keys and HSMs.
• Develop automation scripts for certificate provisioning and renewal.
• Troubleshoot certificate, authentication, and encryption-related issues.
• Support PKI integrations with enterprise applications and security platforms.

Skills

PKI administration

Certificate lifecycle

TLS/SSL

X.509 Certificates

Scripting

Windows/Linux

Security certifications

Education

Bachelor's degree in CS/CE/IT/Cybersecurity

Tools

Microsoft AD CS

DigiCert

Entrust

Keyfactor

Venafi

AppViewX

Job description

Reputed Bank is seeking a seasoned PKI Administrator to oversee PKI infrastructure, certificate lifecycle, and security controls. The role involves managing CAs, issuing and revoking certificates, and ensuring expiry monitoring across diverse systems.

The successful candidate will deploy SSL/TLS across applications, servers, and databases, manage cryptographic keys and HSMs, and build automation for provisioning and renewal while troubleshooting encryption issues and PKI integrations.