Public Key Infrastructure Specialist

Thakral One; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Thakral One is seeking a Public Key Infrastructure Specialist to design, implement, operate, and support the organisation's PKI environment across diverse platforms. You will manage CA/RA, certificate lifecycles, and cryptographic controls while coordinating with security, infra, and application teams.

You will automate certificate provisioning, support TLS adoption, and ensure compliance with governance and audit requirements. Strong scripting and cross-platform experience are essential.

Qualifications

• 10+ years of PKI, cybersecurity, or infrastructure security experience.
• Experience in banking or financial services environments.
• Experience with certificate lifecycle management (CLM) platforms and automation solutions.

Responsibilities

• Design, implement, administer, and support enterprise PKI environment including CA/RA and certificate management platforms.
• Manage end-to-end certificate lifecycle: issuance, renewal, revocation, replacement, expiry tracking.
• Deploy and support SSL/TLS certificates across servers, middleware, DBs, apps, APIs, and network devices.
• Develop automation scripts, APIs, and workflows for certificate provisioning and renewal.
• Troubleshoot certificate, authentication, encryption, and trust-chain issues; maintain governance and audit docs.

Skills

PKI

X.509 Certificates

TLS/SSL

CA/CRL management

Scripting (PowerShell/Python)

Windows & Linux

HSMs

RBAC & Audit controls

PKI integration

Education

CISSP

CISM

Security+

Tools

Microsoft ADCS

DigiCert

Entrust

Keyfactor

Venafi

AppViewX

Job description

About the job Public Key Infrastructure Specialist

As a Public Key Infrastructure Specialist, you will design, implement, administer, and support the organisation's PKI environment. You will be responsible for certificate lifecycle management, CA administration, cryptographic compliance, automation of certificate operations, and integration with enterprise applications and security platforms.

What You'll Do and How You'll Succeed

PKI Administration & Lifecycle Management

• You manage and maintain enterprise PKI infrastructure, including Certificate Authorities (CA), Registration Authorities (RA), and certificate management platforms.
• You administer end‑to‑end certificate lifecycle management — issuance, renewal, revocation, replacement, and expiry tracking.
• You deploy and support SSL/TLS certificates across servers, middleware, databases, web applications, APIs, and network devices.
• You implement certificate discovery, inventory management, and compliance reporting.

Cryptography & Security Compliance

• You manage cryptographic keys and Hardware Security Modules (HSMs) in line with security standards.
• You develop automation scripts, APIs, and workflows for certificate provisioning and renewal.
• You support PKI integrations with enterprise tools such as monitoring, ITSM, vulnerability management, and secrets management.
• You troubleshoot certificate, authentication, encryption, and trust‑chain issues.
• You maintain PKI operational procedures, standards, and audit documentation.

Modernisation & Governance

• You collaborate with application, infrastructure, cybersecurity, and vendor teams on PKI projects.
• You support modernisation initiatives including TLS 1.3 adoption, certificate governance, and Post‑Quantum Cryptography (PQC) readiness.

We'd Love to Hear From You If...

Experience

• You have 10+ years of PKI, cybersecurity, or infrastructure security experience.
• You have experience in banking or financial services environments.
• You have supported certificate lifecycle management (CLM) platforms and automation solutions.

Technical Expertise

• You have strong understanding of PKI, X.509 Certificates, CAs, CRLs, TLS/SSL, and OCSP.
• You have experience with Microsoft ADCS, DigiCert, Entrust, Keyfactor, Venafi, AppViewX, or similar PKI platforms.
• You know cryptographic technologies including RSA, ECC, AES‑256, SHA‑2/SHA‑3, TLS 1.2/1.3.
• You have hands‑on experience with Windows and Linux platforms.
• You are proficient in scripting (PowerShell, Python, Shell).
• You understand HSMs, RBAC, audit controls, and compliance requirements.
• You have experience integrating PKI with enterprise applications, middleware, and databases.

Ways of Working

• You demonstrate strong problem‑solving and troubleshooting skills.
• You collaborate effectively with application, infrastructure, and cybersecurity teams.
• You maintain rigorous documentation and governance practices.
• You proactively support modernisation and security readiness initiatives.

Preferred Qualifications

• You hold certifications such as CISSP, CISM, Security+, or PKI‑related credentials.
• You have Infosec or PKI specialisation certifications (advantage).