PKI & Crypto Security Engineer – Enterprise & PQC

Allegis Group Singapore Pte Ltd; Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

Allegis Group Singapore Pte Ltd is seeking an experienced Application Engineer to support the implementation and management of Enterprise Certificate Lifecycle Management (CLM) and Enterprise Key Management System (EKMS) platforms in our enterprise environments.

You will collaborate with Security Architects, application teams, and vendors to deliver secure certificate and cryptographic key management, PQC readiness, and modernization initiatives, ensuring robust PKI, HSM, and cloud security

Qualifications

• Minimum 5 years of IT experience with hands-on PKI, CLM, or EKMS.
• Strong understanding of cryptography, PKI, X.509, TLS/mTLS, and key management concepts.
• Experience with CLM solutions such as CyberArk/Venafi/Keyfactor/Entrust.
• Experience with HSMs and platforms such as Entrust nShield, Thales CipherTrust, AWS KMS, or CloudHSM.
• Hands-on scripting in Python, PowerShell, or Bash.
• Strong analytical, troubleshooting, and stakeholder management skills.

Responsibilities

• Implement and support CLM and EKMS solutions.
• Partner with security architects, vendors, and application teams to design certificate and key management processes.
• Manage certificate issuance, renewal, revocation, discovery, and key lifecycle operations.
• Monitor and resolve issues related to PKI, cryptographic keys, and HSMs.
• Drive process improvements, automation, and operational excellence.
• Support cryptographic asset discovery and PQC readiness initiatives.

Skills

PKI

Certificate Lifecycle Management

Enterprise Key Management

Cryptography

TLS/mTLS

X.509 certificates

Python

PowerShell

Bash

Stakeholder management

Education

Bachelor's degree in Computer Science / IT / Cyber Security

Tools

CyberArk

Venafi

Keyfactor

Entrust

Entrust nShield

Thales CipherTrust

AWS KMS

CloudHSM

Job description

Allegis Group Singapore Pte Ltd is seeking an experienced Application Engineer to support the implementation and management of Enterprise Certificate Lifecycle Management (CLM) and Enterprise Key Management System (EKMS) platforms in our enterprise environments.

You will collaborate with Security Architects, application teams, and vendors to deliver secure certificate and cryptographic key management, PQC readiness, and modernization initiatives, ensuring robust PKI, HSM, and cloud security