PKI Engineer

Epergne Solutions; Singapore; On-site; SGD 150,000 - 190,000; Full time

Job summary

Epergne Solutions in Singapore seeks an experienced PKI Engineer to design, implement, administer, and support PKI environments. You will manage digital certificates, cryptographic keys, HSMs, and automate provisioning; work across Windows and Linux, TLS, and PKI platforms.

The role emphasizes security compliance, audit readiness, and integration with enterprise systems, with TLS 1.2/1.3 and PQC readiness priorities.

Qualifications

• Strong PKI experience with certificate lifecycle management.
• Hands-on with PKI platforms and certificate automation.
• Experience across PKI, cryptography, and enterprise security.

Responsibilities

• Design, implement, and maintain PKI infrastructure, including CA, RA, and certificate management platforms.
• Manage the full certificate lifecycle, including issuance, renewal, revocation, replacement, and expiry monitoring.
• Deploy and support SSL/TLS certificates across servers, applications, databases, APIs, middleware, and network devices.
• Manage cryptographic keys, HSMs, certificate inventory, and compliance reporting.
• Automate certificate provisioning and renewal using scripts, APIs, and workflows.
• Integrate PKI solutions with enterprise applications, monitoring, ITSM, security, and secrets management platforms.
• Troubleshoot certificate, authentication, encryption, and trust-chain issues.
• Maintain PKI standards, procedures, documentation, and audit requirements.
• Support PKI modernization initiatives, including TLS 1.3 and PQC readiness.

Skills

PKI & certs

X.509 & SSL/TLS

CA/RA management

HSMs & cryptography

Windows & Linux

Scripting (PowerShell, Python)

Automation & APIs

Security compliance

RBAC & access controls

Enterprise integration

Education

Bachelor’s degree in CS/IS

Tools

Microsoft ADCS

DigiCert

Entrust

Keyfactor

Venafi

AppViewX

Job description

Job Role:- PKI Engineer

Job Location:- Singapore

Experience:- 10+ Years

Role Summary

We are seeking an experienced PKI Engineer to design, implement, administer, and support Public Key Infrastructure (PKI) environments. The role will manage digital certificate lifecycles, cryptographic technologies, PKI automation, security compliance, and integration with enterprise systems.

Key Roles & Responsibilities

• Design, implement, and maintain PKI infrastructure, including CA, RA, and certificate management platforms.
• Manage the full certificate lifecycle, including issuance, renewal, revocation, replacement, and expiry monitoring.
• Deploy and support SSL/TLS certificates across servers, applications, databases, APIs, middleware, and network devices.
• Manage cryptographic keys, HSMs, certificate inventory, and compliance reporting.
• Automate certificate provisioning and renewal using scripts, APIs, and workflows.
• Integrate PKI solutions with enterprise applications, monitoring, ITSM, security, and secrets management platforms.
• Troubleshoot certificate, authentication, encryption, and trust-chain issues.
• Maintain PKI standards, procedures, documentation, and audit requirements.
• Support PKI modernization initiatives, including TLS 1.3 and Post-Quantum Cryptography (PQC) readiness.

Skills & Requirements

• Strong knowledge of PKI, X.509 certificates, CA/RA, CRL, OCSP, and SSL/TLS.
• Experience with PKI/CLM platforms such as Microsoft ADCS, DigiCert, Entrust, Keyfactor, Venafi, AppViewX, or similar technologies.
• Knowledge of cryptographic standards including RSA, ECC, AES, SHA-2/SHA-3, and TLS 1.2/1.3.
• Hands-on experience with Windows and Linux environments.
• Scripting skills in PowerShell, Python, or Shell scripting.
• Understanding of HSMs, RBAC, security controls, and audit/compliance requirements.
• Experience integrating PKI solutions with enterprise applications and infrastructure platforms.
• Relevant experience in PKI, cybersecurity, or infrastructure security.

Preferred

• Relevant security certifications such as CISSP, CISM, Security+, or PKI-related certifications.
• Experience with certificate lifecycle management and automation solutions.
• Experience in regulated or large-scale enterprise environments.