PKI ENGINEER CYBERSECURITY

RESOURCE HUNT PTE. LTD.; Singapore; On-site; SGD 110,000 - 170,000; Full time

Job summary

RESOURCE HUNT PTE. LTD. is seeking an experienced PKI Engineer to design, implement, administer, and support the organization’s PKI environment.

You will manage certificate lifecycle, CA administration, cryptographic standards, and automation for certificate operations across enterprise applications and security platforms. The role requires hands-on experience with PKI platforms, HSMs, and automation, as you will collaborate with IT, security, and vendor teams on PKI projects and modernization

Qualifications

• Extensive PKI infrastructure design and operational experience.
• Certificate lifecycle management and CA administration expertise.
• Knowledge of TLS/SSL deployment, cryptographic standards, and PKI governance.

Responsibilities

• Manage enterprise PKI infrastructure including CAs, RAs, and certificate management platforms.
• Administer end-to-end certificate lifecycle including issuance, renewal, revocation, and expiry tracking.
• Deploy and support SSL/TLS certificates across servers, apps, and network devices.
• Implement certificate discovery, inventory, and compliance reporting.
• Manage cryptographic keys and HSMs per security standards.
• Develop automation scripts/workflows for provisioning and renewal.
• Support PKI integration with monitoring, ITSM, vulnerability management, and secrets platforms.
• Troubleshoot certificate, authentication, encryption, and trust-chain issues.
• Maintain PKI SOPs, standards, and audit docs.
• Collaborate with application, infrastructure, cybersecurity, and vendor teams on PKI projects.
• Support TLS 1.3 adoption and PQC readiness.

Skills

PKI

TLS/SSL

CA admin

CLM

Automation

Windows/Linux

PowerShell

Python

HSMs

RBAC

Tools

Microsoft ADCS

DigiCert

Entrust

Keyfactor

Venafi

AppViewX

Job description

Role Summary

We are seeking an experienced PKI Engineer to design,implement, administer, and support the organization's Public Key Infrastructure(PKI) environment. The role will be responsible for certificate lifecyclemanagement, certificate authority (CA) administration, cryptographic standardcompliance, automation of certificate operations, and integration withenterprise applications and security platforms.

Responsible for the design, implementation, operation,and governance of the enterprise Public Key Infrastructure (PKI) environment,including certificate lifecycle management, key management, securitycompliance, automation, and integration with enterprise applications andinfrastructure platforms. This role will support the PKI CLM program and ensuresecure management of digital certificates across the organization.

Key Responsibilities

• Manage and maintain enterprise PKI infrastructure, including Certificate Authorities (CA), Registration Authorities (RA), and certificate management platforms.
• Administer end-to-end certificate lifecycle management, including issuance, renewal, revocation, replacement, and expiration tracking.
• Deploy and support SSL/TLS certificates across servers, middleware, databases, web applications, APIs, and network devices
• Implement certificate discovery, inventory management, and compliance reporting capabilities.
• Manage cryptographic keys and Hardware Security Modules (HSMs) in accordance with security standards.
• Develop and maintain automation scripts, APIs, and workflows for certificate provisioning and renewal.
• Support PKI integrations with enterprise tools such as monitoring, ITSM, vulnerability management, and secrets management platforms
• Troubleshoot certificate, authentication, encryption, and trust-chain related issues.
• Maintain PKI operational procedures, standards, and audit documentation.
• Collaborate with application, infrastructure, cybersecurity, and vendor teams on PKI projects and certificate deployments.
• Support modernization initiatives including TLS 1.3 adoption, certificate governance, and Post-Quantum Cryptography (PQC) readiness.

Required Skills

• Strong understanding of Public Key Infrastructure (PKI), X.509 Certificates, Certificate Authorities (CA), Certificate Revocation Lists (CRL), TLS/SSL, and Online Certificate Status Protocol (OCSP)
• Experience with Microsoft ADCS, DigiCert, Entrust, Keyfactor, Venafi, AppViewX, or similar PKI platforms.
• Knowledge of cryptographic technologies including RSA, ECC, AES-256, SHA-2/SHA-3, and TLS 1.2/1.3.
• Hands-on experience with Windows and Linux platforms.
• Scripting experience using PowerShell, Python, or Shell scripting.
• Understanding HSMs, RBAC, audit controls, and security compliance requirements.
• Experience in integrating PKI solutions with enterprise applications and middleware and database platforms.

Preferred Qualifications

• 10+ years of PKI, Cybersecurity, or Infrastructure Security experience.
• Experience in banking or financial services environments.
• Certifications such as CISSP, CISM, Security+, or PKI-related certifications would be advantages

Experience with certificate lifecycle management (CLM)platforms and automation solutions.