PKI Engineer

Epergne Solutions; Singapore; On-site; SGD 110,000 - 150,000; Full time

Job summary

Epergne Solutions is seeking an experienced PKI Engineer to design, implement, administer, and support Public Key Infrastructure environments. You will manage certificate lifecycles, cryptographic technologies, PKI automation, and integration with enterprise systems.

Responsibilities include deploying SSL/TLS across multiple platforms, maintaining standards and audit requirements, and advancing PKI modernization efforts including TLS 1.3 and PQC readiness.

Qualifications

• Strong knowledge of PKI, X.509 certificates, CA/RA, CRL, OCSP, and SSL/TLS.
• Experience with PKI/CLM platforms such as Microsoft ADCS, DigiCert, Entrust, Keyfactor, Venafi, AppViewX, or similar technologies.
• Knowledge of cryptographic standards including RSA, ECC, AES, SHA-2/SHA-3, and TLS 1.2/1.3.
• Hands-on experience with Windows and Linux environments.
• Scripting skills in PowerShell, Python, or Shell scripting.
• Understanding of HSMs, RBAC, security controls, and audit/compliance requirements.
• Experience integrating PKI solutions with enterprise applications and infrastructure platforms.
• Relevant experience in PKI, cybersecurity, or infrastructure security.

Responsibilities

• Design, implement, and maintain PKI infrastructure, including CA, RA, and certificate management platforms.
• Manage the full certificate lifecycle, including issuance, renewal, revocation, replacement, and expiry monitoring.
• Deploy and support SSL/TLS certificates across servers, applications, databases, APIs, middleware, and network devices.
• Manage cryptographic keys, HSMs, certificate inventory, and compliance reporting.
• Automate certificate provisioning and renewal using scripts, APIs, and workflows.
• Integrate PKI solutions with enterprise applications, monitoring, ITSM, security, and secrets management platforms.
• Troubleshoot certificate, authentication, encryption, and trust-chain issues.
• Maintain PKI standards, procedures, documentation, and audit requirements.
• Support PKI modernization initiatives, including TLS 1.3 and Post-Quantum Cryptography (PQC) readiness.

Skills

PKI expertise

Scripting skills

OS familiarity (Windows & Linux)

Security/compliance awareness

Education

Security certifications (CISSP/CISM/ Security+)

Tools

Microsoft ADCS

DigiCert

Entrust

Keyfactor

Venafi

AppViewX

Job description

We are seeking an experienced PKI Engineer to design, implement, administer, and support Public Key Infrastructure (PKI) environments. The role will manage digital certificate lifecycles, cryptographic technologies, PKI automation, security compliance, and integration with enterprise systems.

• Design, implement, and maintain PKI infrastructure, including CA, RA, and certificate management platforms.
• Manage the full certificate lifecycle, including issuance, renewal, revocation, replacement, and expiry monitoring.
• Deploy and support SSL/TLS certificates across servers, applications, databases, APIs, middleware, and network devices.
• Manage cryptographic keys, HSMs, certificate inventory, and compliance reporting.
• Automate certificate provisioning and renewal using scripts, APIs, and workflows.
• Integrate PKI solutions with enterprise applications, monitoring, ITSM, security, and secrets management platforms.
• Troubleshoot certificate, authentication, encryption, and trust-chain issues.
• Maintain PKI standards, procedures, documentation, and audit requirements.
• Support PKI modernization initiatives, including TLS 1.3 and Post-Quantum Cryptography (PQC) readiness.

Skills & Requirements

• Strong knowledge of PKI, X.509 certificates, CA/RA, CRL, OCSP, and SSL/TLS.
• Experience with PKI/CLM platforms such as Microsoft ADCS, DigiCert, Entrust, Keyfactor, Venafi, AppViewX, or similar technologies.
• Knowledge of cryptographic standards including RSA, ECC, AES, SHA-2/SHA-3, and TLS 1.2/1.3.
• Hands-on experience with Windows and Linux environments.
• Scripting skills in PowerShell, Python, or Shell scripting.
• Understanding of HSMs, RBAC, security controls, and audit/compliance requirements.
• Experience integrating PKI solutions with enterprise applications and infrastructure platforms.
• Relevant experience in PKI, cybersecurity, or infrastructure security.

Preferred

• Relevant security certifications such as CISSP, CISM, Security+, or PKI-related certifications.
• Experience with certificate lifecycle management and automation solutions.
• Experience in regulated or large-scale enterprise environments.