Enterprise Certificate & Key Management Engineer

Allegis Group Singapore Pte Ltd; Singapore; On-site; SGD 120,000 - 170,000; Full time

Job summary

Allegis Group Singapore Pte Ltd is seeking an experienced Application Engineer to implement and manage Enterprise Certificate Lifecycle Management (CLM) and Enterprise Key Management System (EKMS) platforms. You will collaborate with Security Architects, application teams, and vendors to deliver secure certificate and cryptographic key management across enterprise environments.

This role will also support PQC initiatives and cryptographic modernization efforts, including familiarity with AWS

Qualifications

• Hands-on PKI, certificate lifecycle management, or enterprise key management experience.
• Strong cryptography knowledge including X.509, TLS/mTLS, and key management concepts.
• Experience with CLM solutions such as CyberArk, Venafi, Keyfactor, or Entrust.

Responsibilities

• Implement and support Certificate Lifecycle Management (CLM) and Enterprise Key Management System (EKMS) solutions.
• Partner with security architects, vendors, and application teams to design and operationalize certificate and key management processes.
• Manage certificate issuance, renewal, revocation, discovery, and key lifecycle operations.
• Monitor and resolve issues related to PKI, cryptographic keys, and Hardware Security Modules (HSMs).
• Drive process improvements, automation, and operational excellence.
• Support cryptographic asset discovery and PQC readiness initiatives.

Skills

PKI

Certificate Lifecycle Management

Enterprise Key Management

HSMs

Scripting/Automation

Cryptography

Threat/PKI governance

Education

Degree in Computer Science, Information Technology, Cyber Security, or related field

Tools

CyberArk/Venafi/Keyfactor/Entrust

Entrust nShield

Thales CipherTrust

AWS KMS

CloudHSM

Job description

Allegis Group Singapore Pte Ltd is seeking an experienced Application Engineer to implement and manage Enterprise Certificate Lifecycle Management (CLM) and Enterprise Key Management System (EKMS) platforms. You will collaborate with Security Architects, application teams, and vendors to deliver secure certificate and cryptographic key management across enterprise environments.

This role will also support PQC initiatives and cryptographic modernization efforts, including familiarity with AWS